{ "Event": { "published": true, "date": "2026-04-26", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-26", "timestamp": 1777248924, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "4dccb2f6-b48f-4584-b2bb-54052fcb5cab", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1777161672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777161672, "uuid": "fad447f0-bd66-4bf0-bc95-d79eebbc33be", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777161672, "uuid": "f250d446-a566-4d1e-88f9-db141cd4c1f1", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777161672, "uuid": "184f8223-bc20-4f0b-aac8-4e041fde7106", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777161672, "uuid": "6c0f7fe0-81a4-4a45-b0ee-a359ac51b63d", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777161672, "uuid": "5947f002-21d4-4472-9727-5faf73921099", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1777243452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243452, "uuid": "386f261f-f400-457b-a319-03c015b2ab0c", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243452, "uuid": "4c3f21f1-6ea3-4a91-8a67-c18cbffb3965", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243452, "uuid": "6445c6e2-9cc6-422d-a9ee-1a8d73b81984", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243452, "uuid": "21375765-98a4-4ea2-86e9-785044ca1ad3", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777243452, "uuid": "4b8559f9-6834-467b-a04d-0be6568cbd01", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1777171700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777171700, "uuid": "b691a818-bcdf-4f8f-bd67-9790f0ccc254", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777171700, "uuid": "5493642b-e4fa-44d7-99ce-f95c15b7f9e4", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777171700, "uuid": "a50f6941-7037-4839-b665-44b10666f3b8", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777171700, "uuid": "cf9a98e6-60cb-4dea-b6f1-621b47748004", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777171700, "uuid": "c0b0d071-3881-48e7-b06e-1696215dc19c", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1777212128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212128, "uuid": "9364efcb-69ea-4097-a492-7845d7569409", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212128, "uuid": "cb5f0adb-95c9-4266-8cb0-b2480f7aaf3f", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212128, "uuid": "a5a20419-63b0-41b6-983d-a1dd11c5fb53", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212128, "uuid": "e3d1d3f3-b7d4-4f76-b86a-eeb170bf8a00", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777212128, "uuid": "fc0f1eea-2e42-4c9e-addf-dbde4d68ce32", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1777163003, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777163003, "uuid": "41e46478-5fda-4ee4-80be-5634f8efc8e9", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777163003, "uuid": "b2f81af2-cf7c-4354-9877-0f2caeab08cd", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777163003, "uuid": "ba994205-ea64-4fdd-889a-d0607c124cdb", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777163003, "uuid": "33e23344-5efe-44c5-8eda-ce1828a9aeba", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777163003, "uuid": "acc6d30b-c4bb-4992-9b69-d4d76b643d66", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebbe57bd-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1777230068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777230068, "uuid": "2e95c9a3-1b73-4487-9e87-f3062e93f663", "comment": "Malware payload (CoinMiner)", "value": "a9d4007c9419a6e8d55805b8f8f52de0", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777230068, "uuid": "64d0f84e-8757-4388-bb3d-87bda0eb516c", "comment": "Malware payload (CoinMiner)", "value": "5d9fe2735d4399d98e6e6a792b1feb26d6f2d9a5d77944ecacb4b4837e5e5fca", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777230068, "uuid": "883cb2e1-c788-4182-a1bc-a03fcfac413b", "value": "T13F563355F0405826F039107A34F988A2B07DFC724B7559CBB3A83E761E353E8267DA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777230068, "uuid": "ea1bbbde-ba4f-43ef-9911-35ae950f5163", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777230068, "uuid": "a28b18bd-a0f7-4566-a3f0-570dc62c14fd", "value": "98304:RLVSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+jb5jC3ajz4F4VRc:HBfTCiUswVSLOJgyBGv5jGQW4VR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777230068, "uuid": "fc4b48c8-f41d-4eae-8d3f-1590bb0bc445", "value": 6271268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777230068, "uuid": "64bea7c4-abc1-4d5a-ae92-dec096670283", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb99f77b-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "822f7a1f-b514-498a-8e50-28a2048066f3", "comment": "Malware payload (Mirai)", "value": "e422435a52bb0f3fe97428c687567b4c", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "f459709e-dfaa-4986-95a4-a15ebaa7a0d5", "comment": "Malware payload (Mirai)", "value": "8c90012c315f28a76dbb7d3599a36302391377a4ac88663ed5e91f2ac27bac3b", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "b4a668d4-0d00-49ef-992c-617816e4d6a7", "value": "T1AF8339C1BA4BC0F6D9174830806BF33FCB32E6394065D25EEF6A9E65D93364256263", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "b616679c-26fd-45dc-9a59-62ec1bb4df59", "value": "1536:q1BK59Eb0SI7+rRgoXWAcanWiaSyzRigopFXKShkRL:KBU9EVI7+1zXWnplzRidpVAL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235297, "uuid": "b4b09986-7229-4f8a-bf5a-7b2d314f5e67", "value": 87696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "3e32e56c-b079-4f37-8a52-66b53120351d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb9e2d9c-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "f0de607e-db11-47a1-a6f1-9e940cc75fcf", "comment": "Malware payload (Mirai)", "value": "d4196737cef8a31b771eca9b9b8f17cc", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "702d24a7-64c1-4b3a-a0dd-1da59f9cc0f5", "comment": "Malware payload (Mirai)", "value": "9338d333f4e41b794b52355976060e9216fc8916b6753a2f9f8991f17e2eaa7b", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "a50bc3e8-3693-43dc-8a13-ccee16f924ff", "value": "T1A0935D02B70C0E43D1675DF02A3F27D1D3EEA6E121F4F688691F9A8691B2D335586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "2808adb0-fa21-48e1-96ce-f8191507dfe6", "value": "1536:GFsCCOHrTgbrkkoV4SKUgZ5VvHfNaoY04M1ykpAzKY3uVetMuXyCQ7sIER3BfG:LROHrTZkoqkGTAzhRMVC0UG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235297, "uuid": "6560666e-c99d-490e-bb81-72be55dd8788", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "858240ab-0c0c-4217-bbc6-2a87b58ed34f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff323ee4-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "617e0e20-608b-4e31-9ed6-c4234653affe", "comment": "Malware payload (Mirai)", "value": "88aacc52cc00c0d143686f3fbc30bc1a", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "9e83a2aa-74d5-4658-999a-5a4919d09e26", "comment": "Malware payload (Mirai)", "value": "9e675e03d343b36b8b54108679c237b7097c3c9db7ebd41f7ac554bf67889f58", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235299, "uuid": "3880cb69-3431-4bc6-9072-40d921763d3c", "value": "T1F6C3ADC7FA8714A1C46206F003C71BAD6F93A221CF5FE4E7AC1DB63B5A7A4DA15163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235299, "uuid": "b2f90727-f826-44e6-8618-502c4145c291", "value": "1536:KrMjtT/2h9gdeHjV7uXwHlWuoPpsiUckl9kyVcMxs5RpgRCEy/LWZ:KrWT/i9KXwFn+jUck4yVclg8q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235299, "uuid": "e0001947-3a46-45a1-a208-f7412632f33b", "value": 124676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235299, "uuid": "e1bf4ce3-5e9e-43cb-be2c-781b7cb6468e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff37819f-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "8e685fc6-62fe-4276-b62b-6d45be1af450", "comment": "Malware payload (Mirai)", "value": "df0266ed4fa163135a02c657518ab828", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "75510893-1aaa-42a7-8866-4972da5199c0", "comment": "Malware payload (Mirai)", "value": "0cddb8c8a70b498bff911e54c54f2101f666486de3eeb8e2359eb425fe355d40", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235299, "uuid": "234e020d-28a6-4c02-baf0-4e2f02597141", "value": "T1FC432B91FC9245AAC7C117BA771E978A33A26369C2CF7313DC080A5076C9B4F4E67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235299, "uuid": "4858f1c3-4f3c-479a-953c-2e9574fc7c61", "value": "768:yuoWsjpIE9StBkNxCU8d+b47DdZVOIrdQKw54u8OMb2FX0npzJkr:MBjpIE6auz8UDXcIrdQKw1EO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235299, "uuid": "93467fb4-fdde-4f53-9a8f-2bad065281f6", "value": 55308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235299, "uuid": "5ff57311-cb24-47f4-a767-2e8ac12361fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff3c0c4f-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "766fc7d8-fce8-43b9-84be-7e34e46cefd1", "comment": "Malware payload (Mirai)", "value": "df0bef96d0c2e6c26fc7b560a7c579dc", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "2ee4274f-7097-486b-b86f-4ce532d93f03", "comment": "Malware payload (Mirai)", "value": "435b581583f7f42138e67bf16a7bedb9e7edbb321806daac96be7f171aba0737", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "dd9d9e29-1534-4024-a182-6a28e38b3c4d", "value": "T15AC3F909EB614FFBE86FCD3746E90B0525CC551722A83B7A3574D828F64B64B4AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "5d0d3da9-8535-471e-aaca-1e642165a7c4", "value": "1536:1NyKMWFSdRBVf+g6z3jL3JsYRX5sLuYk+ot2Le8hUK3ZanZJeG7r637oFW7MnS0P:HyKMWFIZ6TXQKK3UniG/L6rLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235297, "uuid": "28ddb552-b7ec-4c1d-8df6-d9075852bd0f", "value": 122496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "6ccdc92d-c0e9-40df-a902-f9a5d27569a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff403ec6-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "dd0e82df-e8e1-4b72-94f0-ed8114fc1fc6", "comment": "Malware payload (Mirai)", "value": "fc2c4ad6f71eb9550564cffb79d9f6af", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "4a3e81c4-d52f-4a19-92ba-e9ff0ed64c24", "comment": "Malware payload (Mirai)", "value": "9627724833a50e015b91353bf94ea78089860b9189447ba59c3e8231094982ad", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "69434ce0-4d5d-46de-91f9-2a594ef8b0cf", "value": "T12CA34AD7B401DDBDF84ADB7B40531906B131E3A20A831F36626BB967F9361981937F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "d378caa2-9605-42f0-9ef5-1b1a71e53abb", "value": "1536:9PMpxBl0//5Su3gtVfd4zsTYCkrr7o8zWA8T3OH6iC2J3m8Ry6KG7QIeW4N0XQ8g:n//H3gtVlu1H7o8zWIP3mOyZe4N0X5g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235297, "uuid": "f52a3487-a7e6-444e-b903-b844cf36dbd2", "value": 99704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "d62761b8-38b7-4048-bed4-0fa891a09d51", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff4334bb-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "57dfb5a7-bc9f-4d42-a07a-9098b419b185", "comment": "Malware payload (Mirai)", "value": "eee98cbc8550e607e3f05794b178aa17", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "40087fd7-94bc-4730-aa43-8204b08306d8", "comment": "Malware payload (Mirai)", "value": "931b909773d77ce616e5eeed1751354f3be255b3bfa77578e0db82f70bdba43a", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "94d533e3-f503-43d8-a80f-2a348fe8c20d", "value": "T1EC933952FD818662C6C126B7FB5E028D372653A9E2EE3203EC156F2137C795B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "a8d5a276-b4a8-439c-b971-59653a9b8ba5", "value": "1536:jxbuV/oeWRynbOAtom7xGJaJa44Bx8ySAN9TwxJSCJonP9eJCQsP2j+ks:jxbuV/VWRynb57uHx8yRtkSC6CCQs3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235297, "uuid": "1a196376-945a-45c4-8f0a-3b41699bdcc5", "value": 89716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "e3477022-4e4f-45a3-8be4-ff8c23315fdc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff454676-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "1b08e025-d9d6-499a-a065-1b42cd493724", "comment": "Malware payload (Mirai)", "value": "255e1a0a46ba7980778e329e30c80fac", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "9b600205-9e36-47a0-b5c6-340334f59b4a", "comment": "Malware payload (Mirai)", "value": "c21fee2611a33c3b8628fc24f9718d46e0f8df975a2837be6b641d754365f1ea", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235299, "uuid": "1a48b5e0-c0d9-42ce-8131-eda3ef01fb42", "value": "T124937D85FB83E0F0DD0609B011ABF7798A31DD362024DD6BEB98FD76AD326129116B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235299, "uuid": "35a517bd-be25-41d2-b72a-d69460b08f81", "value": "1536:JUj89KwKFRAXmDRDDCczE7JoQ4z8GGIYqoBcQaU331QUHLaEiKixr:w4KFRA2dDDCczE7JoQ4I3xuiG1l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235299, "uuid": "d4b5f066-2bbc-44af-92b6-d6d8c5585c64", "value": 95444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235299, "uuid": "702a6252-94b3-4da2-aac4-f6aace3cb570", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "021526c7-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "318477f3-995e-4f10-add7-7c876fdf60ac", "comment": "Malware payload (Mirai)", "value": "f486490f80292bbe05f7a596f18d69d2", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "3815ea93-f49f-4838-9c73-b11924823251", "comment": "Malware payload (Mirai)", "value": "0ce082b52d7e17bde880ce0eabfa345c47c0529afcf94226bb1c097773c44943", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "3084ff82-9263-4f84-bcc9-0cff383b0611", "value": "T1C9C3C74E6F218F7DF368873047B38B25A75933D626E1D685E2ACD6005F6034E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "7e698001-9896-44bf-b9f3-6f731603fe3d", "value": "1536:Y88hVKLkQwe4eyJjkKFZITjPCLku7wpa5wU9a7w+8OyOADea2uPNKpslW:YtVKLfwv5kOM+H9a7wyyOATN7k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235297, "uuid": "f2815d39-6ddf-4caf-a01d-544024c93977", "value": 118400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "032f0679-2d90-4824-a442-6d8cc8a91424", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "021c31a9-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "58c2c07b-19c4-41ab-a520-684359edb186", "comment": "Malware payload (Mirai)", "value": "b753c963837dafadf2b433be0746da41", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "bd9d0701-bfb0-4b8b-bb95-fd423ae07f9e", "comment": "Malware payload (Mirai)", "value": "2696eeb4ffbce47e4685743698a8d0be93714b2b74bb45187a39b859943189af", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "642cf5c9-f2e0-431b-a21c-69befccf6147", "value": "T14A933992FD818622C6C116B7FB2E428E376713A8E2EE72039D155F2137C795B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "2e908786-64ce-479d-8699-cc5d5c4bb54e", "value": "1536:Q5cCxUV4w2eQpemBLn1l0+Mi3DbP194EBqNmvYEaLAr1ocMtbv6aIA:Q5cCeVhQpeAwi3DRGEQNmvdpeB6A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235297, "uuid": "53462ffd-9dd4-4897-b543-69d3e6211db7", "value": 93228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "c43dda7d-8be4-466a-9957-11e8d434ea4e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02232835-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "467f3420-c8f8-47ab-abf2-284442096f58", "comment": "Malware payload (Mirai)", "value": "08032b4259310ce451b4968ac0b814a4", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "7947986b-54c3-478b-9703-e745eb445da8", "comment": "Malware payload (Mirai)", "value": "c6fa6befa00083e6f63fb21de0aef17047079534f31c7956e429071c11dccb61", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "1909896c-57f5-479b-8e94-07647a9b81ef", "value": "T103837DC6E743C0F4E8528973213BE7328A73E53D102DEE83D769A932ED12541D66A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "c2cc43f2-ea4b-4b03-91b9-f1ae3bb2477d", "value": "1536:bAxTtfhenc5SWhp9ClAIVVk/13HWCsBjJe7s4TtABV:bALIuSGp9ClAI4/13HlsBdarE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235297, "uuid": "b6b1b1f0-2225-4eef-abd0-35316d6f992f", "value": 80880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "394111e7-fd2e-40bf-ae64-cf5974f06f2e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0224efc7-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "e806e9be-979e-4034-8a80-1119198f271d", "comment": "Malware payload (Mirai)", "value": "a24aaebee3f44f87cd6b151098858b09", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "23a6c68f-ad7c-4c5e-aad7-16ad1a38e2e0", "comment": "Malware payload (Mirai)", "value": "70f0c5b089d59143fcadcca06d67dbbbfe4a4136270fe714ecfeb28bd302e249", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "aca65a61-bd4c-403a-a028-5b6d397f188d", "value": "T1DB33391295BC1A2BC4D4AB7701A74363E1FA2B9541D4E64FBD220D4FEF583502ABB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "23aedd5a-4b63-4fd3-96f6-4c3de6526309", "value": "1536:SK8kL18buuQJHtK++mmyuSquydBQdSM4pKrt:S/F0YZ6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235297, "uuid": "0f6277fe-cbd2-4e1a-9ff7-7eafbdb17c89", "value": 53668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "3b5ae1e7-bde6-4e4a-99ad-ee399c7515d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02274dfd-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "a0f32aac-b9dd-47c3-8d4d-9a52b369e916", "comment": "Malware payload (Mirai)", "value": "fc98dc6939e097e3e23f78366040cf57", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "fbe428ff-8ca5-4584-a88e-251fc5fa0521", "comment": "Malware payload (Mirai)", "value": "e7d9108c3c3a5a5c7c21627dab473da9f95cf8f5947b56f3d20fd7e2acde7de4", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "10f61ab6-24aa-4eb2-80e8-9b58db5136e2", "value": "T11A839C33C93A0E68D84845B4B0B18FB65763E51581972EF7499AC63AD083EDCF58A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "6408235e-8429-4f94-bb05-780ca6a22b63", "value": "1536:lgynxf8zTG9xM4AefRQKRPLSkC+RCaR9HnHyW:lxnx39GcR3RXC+Rvdl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235297, "uuid": "7dee8a53-b2fa-4836-801c-24f091588efe", "value": 83812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235297, "uuid": "80da430f-e887-459f-8743-1474a01e217a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eb54223-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "7f813f51-89b9-444d-bd42-ef997576ba51", "comment": "Malware payload (Mirai)", "value": "a590a06c18e1e25cfc595b3e6477e8ea", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "d02901dc-be11-4f0b-a5ad-f20ea98dcee7", "comment": "Malware payload (Mirai)", "value": "1c544f9b7957bbae75e0bade822be8f3bf3e8bb84c266804996f1b3c516c7ba9", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235299, "uuid": "5c6b63c7-6e55-48f4-8485-c506767a38e7", "value": "T1BC432B91FC9245AAC7C117BA771E978A33626369C2CF7313DC080B5076C9A4F4E67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235299, "uuid": "0aa8ba09-5411-4e67-b769-966abd5262ac", "value": "768:j2uoWsjpIE9StBkNxCU8d+b47DdZVOIr9QKw54u8OMb2FX0npzJk6:jABjpIE6auz8UDXcIr9QKw1EO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235299, "uuid": "5681ef06-c03a-400b-86c3-b8bf7573ff19", "value": 55308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235299, "uuid": "d004aad0-218f-4037-9ec4-b99ca84bd959", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43250a78-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "8cea248d-4518-4b3d-bf54-aa4f51ff6e65", "comment": "Malware payload (Mirai)", "value": "f0455df8f701357c01eab9c0d6294f31", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "b806c1df-c5be-4ecc-8503-f0307f20302c", "comment": "Malware payload (Mirai)", "value": "8417676d023b2de759904e051da33a0028b18f9626cf70f20af862c0845ee759", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235299, "uuid": "7d7851d1-8d12-4045-b0e9-b9f9abe35b85", "value": "T142935A53B9C480FCC849C17057AFB236D923F17E1239B19B67D8EA167D8DE111E6EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235299, "uuid": "fa9c06d9-fe5b-4acd-877f-7dad1dd5da00", "value": "1536:lPfYtYZjnRc/6UTgUdQN87B87yaAQ01B1ks/Vyec5fwlLJH27ySHA:RxZjnudTgUdG87Ayaq1B1ks/VW5fGLoE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235299, "uuid": "078dafed-735c-45bf-a24a-95617d29d809", "value": 88928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235299, "uuid": "187b86c3-c0cf-4151-920d-e63de3dd945d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd6013e6-e477-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "667dfa91-7158-4315-8d46-6b7c328723eb", "comment": "Malware payload (Mirai)", "value": "98fda6722231a7ed6ff01c25c4be23c7", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "0401ead3-a1c1-4d03-a78c-3e3ef1ef4006", "comment": "Malware payload (Mirai)", "value": "538b1cbce4efc20a2d4edcbb44efb71156279bed31a9f42b07e950548f7e83d6", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235299, "uuid": "47baa881-2aa4-459d-a2d5-3d567da924a0", "value": "T167936C42B70C0A43E0575DF02A3F57E1C3AA66A120F8FA89790EDE4996B2D325547E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235299, "uuid": "3cfd51c7-4b68-4502-9a3b-d5fa510b7ba4", "value": "1536:aDbQbediuZ6mJYRBNS3LJEr0YN7OQqTzp8asfFzmge2MP0l1WrSlfPp+tID:wQEI4TzGame2MCWr+ND", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235299, "uuid": "f199f75f-7757-4c93-987c-c0185c790084", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235299, "uuid": "47c57ef8-3f67-442c-964d-cdbb1bf6e8c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b0dc7b6-36e1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777214288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214288, "uuid": "ad0ee08f-9e7c-43f0-bfe1-191c3d79d1ec", "comment": "Malware payload (Gafgyt)", "value": "0342f693c43707bb3ca09c6ab48e6e4f", "object_relation": "md5", "Tag": [ { "name": "204-76-203-195", "colour": "#d42294", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214288, "uuid": "609eef8f-fa26-4ee6-878a-a7226f1a2497", "comment": "Malware payload (Gafgyt)", "value": "be82c8c77e6e3f64ece7df84511c4dbb60c80244ec03255ab462ff2300180ba9", "object_relation": "sha256", "Tag": [ { "name": "204-76-203-195", "colour": "#d42294", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214288, "uuid": "931466df-f4e6-4ada-b04a-4cced9bc3504", "value": "T166F039EAF00512CF812DEE0420B2CD8C7153C2F062A98E1B6EC9283A80CFF02B821E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214288, "uuid": "c558243f-74ac-4ce6-8cc9-888fe06624e1", "value": "12:W28aUJ5B5jNITTg7kgkSEJgvnZ35XEvCHQgjKgRO:Wldf5jNIo7kgrEyV52CHpKgk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777214288, "uuid": "edd70ad9-f7ab-4d99-af79-52f4d3403e49", "value": 485, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214288, "uuid": "e7d5b8bd-7a62-4bf8-95ab-36f579474314", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96a6260f-3a60-11f1-bc00-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1777227206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227206, "uuid": "da60c78f-4214-49ed-b25d-b03cf8886bff", "comment": "Malware payload (SantaStealer)", "value": "eab63c490102d94c5a3b3914195c3530", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gitlab", "colour": "#a79648", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227206, "uuid": "c526568f-fe4e-42b0-8828-bcefa22e8f4f", "comment": "Malware payload (SantaStealer)", "value": "8f3ddbc6090f6bbb75805de8ca284953696e283b438cfa9a45c3713c6ebcb70c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gitlab", "colour": "#a79648", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227206, "uuid": "05171f42-fd04-4c6c-ba93-ac8238f8aed3", "value": "T18267E0DBF60DB9B4F315956AC7D0EA086F8FF8B180E391A001D11B3396AE946DB874", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227206, "uuid": "6a7d85f5-b55b-4b0f-913b-f849696bf1a0", "value": "5db62f1c7bafdda66124cfde5230bea0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227206, "uuid": "fa8c08a3-47b2-4d95-9e67-2b537fd6f4fb", "value": "786432:hP1TC3oQmx3imvWEmBjsWdMruJZrize+SkjRn:p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777227206, "uuid": "b2970a02-7957-42d0-8283-d8123ae69e6b", "value": 30016722, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227206, "uuid": "66a77876-e8f2-4b7d-b87c-5eda957a941f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43993c72-3e28-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235362, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "fa618c28-0036-423d-b5b6-0bb4d6611fc1", "comment": "Malware payload (Mirai)", "value": "19975cd129fa660713ec621c24ef2fb1", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "a2e60d4e-30a8-42ea-ad32-943691a76e6b", "comment": "Malware payload (Mirai)", "value": "2ea0d31c3c95a87eb483e6444e1a3d8a9fefcbad95ce3375370ff4b6dccc87d8", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235362, "uuid": "76bf31d6-4580-4a64-9f95-6d460c5b198e", "value": "T1D57301AA23E8F766F62717F260732AC03B5528D8500F8663B519798DC5DE142244BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235362, "uuid": "02dbfcfe-338b-4ab0-8d4f-35436e24d063", "value": "1536:7t/53cJDRHOOjK48HtwaY9PELOha/ny41DAAE9e5SZ9Yi9LAZBiodG:pxgRuOjKxwaY9PaOgyIDAAEeCmBikG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235362, "uuid": "9ba7c163-8bad-4f40-80cc-0cfb0d385646", "value": 77580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235362, "uuid": "fcc17a7a-462c-4a97-987e-245c06c23322", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac0828b6-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "8bd05c05-94ba-4b24-804e-a48bb557026b", "comment": "Malware payload (Mirai)", "value": "8a9fa9f2149898c57cd10448ee13c236", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "d79119f9-9ff7-42b4-b618-ec08897bd326", "comment": "Malware payload (Mirai)", "value": "6d77ca7d7cf62c759890a816a831d1a5abe6c1e0efd2f57f0fb498278ff808ba", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235361, "uuid": "0e51eba0-cf4b-47e2-abc3-eba181a6ade0", "value": "T19303F11225CC425BDC4DB23D035D1ADFA9B02E621E97FF5AB9880DB98A352A096F4F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235361, "uuid": "62a27233-c221-4c0f-aad3-3b8f852c9bc3", "value": "768:x2kfZ/bHf9x73X4LRk5OxAes9N0tG+QSMhj3az+363yooJKyZk+j1If3IXhj:xnZbHXY2oxAt2qhhLKkZrcIfss", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235361, "uuid": "9cca758c-75c9-4cb4-9c4a-ac8d2644c7e5", "value": 40444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235361, "uuid": "d424b5e1-db9e-4ddf-99e5-c341cb1efa31", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac08a7c8-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235362, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "76a4736e-7e3a-4633-88ad-74111efaa20f", "comment": "Malware payload (Mirai)", "value": "fba6b785b5148befb8606420bd2b290e", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "d8ab2ddc-bdce-43bc-b25f-be84fe75a1cc", "comment": "Malware payload (Mirai)", "value": "0b2998c06a58ece81ec8303ab81f7ae61fd74a1d7639e09e9742a1cb90528580", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235362, "uuid": "14ac4762-e0cd-423b-b3bb-1f2ef498884b", "value": "T19723F120E0215A2EA1710CFF15B565B7B315EB78ADF8708F3B6674A34D26E4EF2A18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235362, "uuid": "8a099106-6ef4-4a10-b595-576bff3976a6", "value": "768:rvIaeg11UR7jw33sixFm8ja5ZQkp4SNQC/WOofcMU3HgLjhfSuXDothGndR5:TUE3si3Zja2SNB+7HU3qhqrcdR5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235362, "uuid": "207377bf-dd04-4c5d-9be3-0c0fa21f2fc9", "value": 46748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235362, "uuid": "d843b4d2-dc69-43f7-9425-bd963963c802", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac09e3bd-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "fce16a8e-23c0-457b-9a8e-7a72647ff08c", "comment": "Malware payload (Mirai)", "value": "65a38ad80462b24b35eb1237c021c1a8", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "12263e6d-e06a-439d-929c-fb194862f8b1", "comment": "Malware payload (Mirai)", "value": "2e42d976a86c2f79bda5f19fcf8335c3c29f5c7e712299bce36d429a4a2c6243", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235361, "uuid": "0e798d1a-5b5d-46bb-8151-f358fea8c9ad", "value": "T1222301CF8B5CE27BD242357ECB994976D103A84BF243F6282CE07B057D28009A66DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235361, "uuid": "a620441a-9d47-46b7-8290-8c301acd577b", "value": "1536:yI/naMIdNTH3gWf+DWfRSzxcFlxyCyqKZ95U:yVb3P+DYgccCyrv5U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235361, "uuid": "452e72a0-5e0f-465f-b885-b7f4e29472d7", "value": 49740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235361, "uuid": "049d424e-9e12-483e-b636-f1286aea8499", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac11caa0-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235362, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "ea39f10c-66f1-4932-be79-92c86e55fae0", "comment": "Malware payload (Mirai)", "value": "22f94584a3e46ecfe93910bede6574f8", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "787da428-f17d-4ea3-9244-fde3c5ba359c", "comment": "Malware payload (Mirai)", "value": "7defbf222c8557ebf4d767efbb0a1682ae17127e282299ed2464f9b767cc4a55", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235362, "uuid": "71c6a0df-e6ad-46b2-8ea3-070c452153dd", "value": "T1503301368A9617D4C02E06313F4B87DD7B68CFF06191E216962489448D6F1BB5DAEE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235362, "uuid": "e3921593-1e0a-4eb0-b460-973c4559e887", "value": "1536:INRtXYi7iE3Vrzgmfv0IrqFWEWnyrH6DRoIRzE9nDO:+r7L1cmX0DF5b6DR/RzEQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235362, "uuid": "6a57d2b8-3fd7-4853-ae9a-0cb43851b349", "value": 50304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235362, "uuid": "bee2e0e6-4c76-4c62-8f3f-dc31d1501766", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac17ed67-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "1cbea9e9-404a-4b16-ae65-72cd07649fea", "comment": "Malware payload (Mirai)", "value": "3fcf3ca989b8436ab018ace6a868b0da", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "f0bdbb72-d663-4fd4-9b34-bfe3f991f8fe", "comment": "Malware payload (Mirai)", "value": "4c2df1810cdb3aa407dbae07ed14213628b303d7bf487418e51924c3760b47eb", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235361, "uuid": "4fecd662-af05-402f-9b77-e5c7f8932f8a", "value": "T1CA13F25172C7EDA7C9D4E037826E342B72A4E523BB97FE813AF06751C2321A4E3661", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235361, "uuid": "940a07ba-d145-40b0-99d8-96ea3acb6f80", "value": "768:n3XFQh9sCCqwPUAudPwZD+Rfz1wRgEW8YDlmlKNzZb4/dXly0G:nnFw9sCQ9kaE71weEWPlmIxy/dVy5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235361, "uuid": "29ccdb1d-38e7-4e61-99b2-88e2f0a71100", "value": 42768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235361, "uuid": "430e79f9-65df-471f-a680-db5dfd37be5c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac1cab5f-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235362, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "73bc7cf7-2595-4dba-969b-ab878e626578", "comment": "Malware payload (Mirai)", "value": "4668d0075c6c748791a9a03081f5e6ad", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "be6b02a3-6dc9-444d-be49-ff0189ac9775", "comment": "Malware payload (Mirai)", "value": "c377615f57f295e64a8240af54e6c607e1061028e8e0e5cce6642344d5483012", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235362, "uuid": "97cb5242-a7bf-46f3-b45b-70a80d2298c2", "value": "T1DB13029C65B7CE6ED8F35231A2F805DE4DF1B9775D1A941237DC26C60FFB11600128", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235362, "uuid": "0af11112-7df6-4daa-a168-f1e0167daf24", "value": "768:WHQa5QDovTv4hl6NvNeh43agxtACwt7UVjp0DgG2jnIqGV5q2IysDr:pa5ooLvUl61N3y3piFDIDJIyU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235362, "uuid": "6545dcf1-d588-4919-bdde-dedbfdb9ea1a", "value": 42096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235362, "uuid": "b2b503a8-88f8-4686-8810-f038ef124b53", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac1ca188-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "40330363-e937-4135-9f35-e4c5a736f696", "comment": "Malware payload (Mirai)", "value": "a01774fd869d5779cb69d30b532b29b8", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "18ce5995-52d2-4e82-9784-c4328196c041", "comment": "Malware payload (Mirai)", "value": "79bd145c01a073e5a7a1bb1ccad1c73ec5f0c75756110269d67a2a54ece1ef26", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235361, "uuid": "098b350a-2afc-414c-821a-7602be516552", "value": "T13E935B22B539193BC4E4947622F35326F1F6438A14A88B2E7E710E8EBF156D0364B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235361, "uuid": "f1cb2e29-2884-4807-ae3e-bfdc78971ef2", "value": "1536:DCTLZ0J9dF+/EqR9oShcUvytX5Ym5ngP5gYtGGJ:2yi+0FaB5YOgAGJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235361, "uuid": "cfd1cebb-2aff-4636-9b90-9dafdc79e490", "value": 91984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235361, "uuid": "1efc9d38-c85d-4bc6-8176-73c29d5d5abc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac2331ab-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235360, "uuid": "5f5fb7da-40b3-484d-8f61-e10c2a7413b8", "comment": "Malware payload (Mirai)", "value": "9753a668cbdd16ae64ddc5d13a9cbfe3", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235360, "uuid": "9d4f637b-55e2-492e-b24e-93e175a3f57f", "comment": "Malware payload (Mirai)", "value": "88220667d4473761f6dd8cbb470995ac610616c11c45aad5541833142d547adc", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235360, "uuid": "9ff4ae69-04fc-429f-a008-60d905e8b3b7", "value": "T14A13F167CF185A2ACFE002B442240711665E5C1C92AAA5FF510D6AEED3701EFDB989", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235360, "uuid": "973d8ce3-c672-4baf-8ce7-dd93a6ca3a58", "value": "768:lir6qZ28q1OUvoniI2jVzH/fCWY6oMDmgVMjuZFG+rN7RK264kALZqHtnh+4F+Hx:lirA82O7np2F+6oGNG6N716zAtAJF+R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235360, "uuid": "7e243928-0b94-474e-b1cf-97c70f84966f", "value": 44428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235360, "uuid": "49545369-471a-4043-a290-195eace93eba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac242972-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "16a0f963-c401-4a45-9669-d15bd1e3578e", "comment": "Malware payload (Mirai)", "value": "ef151e4a5b484ef71377da72315f7c0a", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "42aea495-127a-4b78-a676-ff37e9f514a2", "comment": "Malware payload (Mirai)", "value": "666b711826306621053a5b6bc58edb46adf79a178315d5fd492b076699274549", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235361, "uuid": "b938d8f4-d093-4e72-9973-95eb6dc6c1e7", "value": "T161C3AED7F68B24A1CC6246F007C76B8E2E6362119E6BE9E72C1E753B19391DF19063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235361, "uuid": "96442780-cee1-4f80-aeef-2e9a0991aa70", "value": "1536:fu189r2mIHgqH8IV3NB4BuLaLWqxIijGsueEoutC8xZJqKg9T/LWQ:21ur2nj73qBuLetRGsZutCpKg9Tq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235361, "uuid": "a7e888db-99ad-48ff-a487-beaf6512094b", "value": 124352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235361, "uuid": "bb1d4094-d6e0-40f3-8420-393c70c75e01", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac4f80da-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235362, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "9e3abefe-8506-4b72-9ab7-934e9697a482", "comment": "Malware payload (Mirai)", "value": "13367708de4de8c08b1d89b9c90de59b", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "37419b48-9be7-40e4-bb45-4e63abaf9a82", "comment": "Malware payload (Mirai)", "value": "e414fb4d8421e5e5a696bcc5c87ba6dd7b37391239fa1903091c46dbb21f31ce", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235362, "uuid": "c897c17d-0c2b-4a03-9963-91cc12fe8714", "value": "T12AC2F15DC70101AEF34C19B9B564CC9ABDD6FE2F2ABDD0ADCB7061241235AD6821CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235362, "uuid": "711d6239-cf45-440d-ac19-6371fbf33927", "value": "384:fx/dcBiKMqv4rjkkcAXSLtPJVnTPJcLGKq0nO62TDMGDdXzPItMcp9LqvehTp/fa:lqCqveFCDvtvDjUtBuvedRq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235362, "uuid": "94674795-bd9d-4076-9c8a-f5d7d1dcaa83", "value": 27076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235362, "uuid": "3eedea5e-bbbb-42a8-9da1-ca93c8046208", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81bb8329-3e69-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777203856, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203856, "uuid": "c6be1eac-7b45-4f98-9011-1d04f2ab5b90", "comment": "Malware payload (Mirai)", "value": "741f58d7c3bd03d04be00011b1231b81", "object_relation": "md5", "Tag": [ { "name": "176-65-139-130", "colour": "#a3e7a8", "exportable": true, "hide_tag": false }, { "name": "beautiful-roentgen-176-65-139-130-plesk-page", "colour": "#3b69e1", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-176-65-139-130-plesk-page", "colour": "#9a8a8d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203856, "uuid": "5d007ea5-d34c-4e58-8e3a-d1f8efaf95e5", "comment": "Malware payload (Mirai)", "value": "2bdfc74b900e086c6bb1278cdb72bd4de6b3aea855937f34bd729d21c9bdf512", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-130", "colour": "#a3e7a8", "exportable": true, "hide_tag": false }, { "name": "beautiful-roentgen-176-65-139-130-plesk-page", "colour": "#3b69e1", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-176-65-139-130-plesk-page", "colour": "#9a8a8d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203856, "uuid": "ad4e34c3-65e0-4628-963a-00e48ed150dc", "value": "T17B14961E6E228F7EF669837047F78E245B5837DA16E1D680E1ACD5101F202DE641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203856, "uuid": "73b733e7-f15b-4aae-8fc6-039308c44813", "value": "3072:xFwjJ/XEcjNQ6A2nrILykYQvPwTosD0jIypaTC5GS:xFwjdXEcvrILy+TsD1OaW5GS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777203856, "uuid": "e72e6e45-54bd-4428-b360-ff2af8edb976", "value": 207120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203856, "uuid": "0ec3ee2b-495c-402d-bbec-883974710442", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8637304b-3e69-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777203854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203854, "uuid": "1156215a-4506-4187-a66d-2f9f8a694d8d", "comment": "Malware payload (Mirai)", "value": "9ed0316ca1b6fa720cc0b1a86933b2f1", "object_relation": "md5", "Tag": [ { "name": "176-65-139-130", "colour": "#a3e7a8", "exportable": true, "hide_tag": false }, { "name": "beautiful-roentgen-176-65-139-130-plesk-page", "colour": "#3b69e1", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-176-65-139-130-plesk-page", "colour": "#9a8a8d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203854, "uuid": "dd54f8c6-f9d0-4af8-9d80-88f7c4560e98", "comment": "Malware payload (Mirai)", "value": "1561dbdb28eaccdb8c7829c72ad30752d6c368e2c3ac9967667f360042313528", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-130", "colour": "#a3e7a8", "exportable": true, "hide_tag": false }, { "name": "beautiful-roentgen-176-65-139-130-plesk-page", "colour": "#3b69e1", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-176-65-139-130-plesk-page", "colour": "#9a8a8d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203854, "uuid": "c018a013-940a-4a02-804d-0653546136bd", "value": "T180930A45F9824F12C5D622BAFAAE018D33136BF9E3EA7102DD205F6437C559B0E73A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203854, "uuid": "85112643-0a08-4c29-9540-797085d883b9", "value": "1536:CYnRJVNHuzPwJMwYN0P8an6v5M1crno2cCWPOt8CsrapgIbWlg6iiJjcw6bT:dnH0PfwIAfgymrno2/KOt8CsrapWdjcd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777203854, "uuid": "2d139d7b-fefa-4591-9f29-dba265bafbce", "value": 92948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203854, "uuid": "459ae988-6b29-41f6-b5f9-a31f38ebc3a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ded9fce-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "5e8898f3-7fc5-46a3-a199-cfd09d19f11f", "comment": "Malware payload (Mirai)", "value": "7220f3b8f2bd81b8ce6d011b0243c00e", "object_relation": "md5", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "8799eaf2-9bd2-4584-9af4-eb18210beb6f", "comment": "Malware payload (Mirai)", "value": "a0c7f4d61271ba17052c25df0c6b0d275a22455b3f94cde063d456dc07c69957", "object_relation": "sha256", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "bd3b1bcd-8b13-48bb-ae48-8892835bd40a", "value": "T12E83F719BB914FB7EC6FCD370AA9170134CC591B22A97B3A7934C918F60F64B06E39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "de85f42f-899d-4a46-a959-e7023c67fa9d", "value": "1536:p7UMCN+nMZHavzjkIPLMb3dJLEbqP8AvJW5coYZl2s0CVEJNl:p7dCN+nOavz/U3dm5coYNVANl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200619, "uuid": "8556b234-1306-4b05-93a5-59838d6f8184", "value": 81928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "0d6c3196-2c28-4a53-80de-26eb87d8618d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f3ce4a9-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "5fe436b1-2442-404a-8bf0-48dad8cb9d0e", "comment": "Malware payload (Mirai)", "value": "5a4f49fec7c52719369c9465f61340ab", "object_relation": "md5", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "00ce0bd2-4120-45e5-9c4c-fc9d01110bcf", "comment": "Malware payload (Mirai)", "value": "6f2720000cc39c766bbe14b34221a38f9b3b143bd1252884059f781eaf1d6965", "object_relation": "sha256", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "874474a1-0604-4be4-9309-943a6cc189d2", "value": "T10EE32B46EA808B13C4D6177ABADF424633239B5493EB730699287FF43F8679E0E635", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "43ff37e0-0419-4cb1-bb7d-d0eee26eef0f", "value": "3072:LfIWnM9uTk1zXxqaNbIkz/rnN/9Yx5TQBuPPDM/9+10g38VnE:LgWnM9uizAaNbIkz/5/w0BuPLM/9+10i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200619, "uuid": "7590c8bb-34ea-40da-b60c-2866867e1569", "value": 145461, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "d04f30bf-28e4-4f15-a5c7-54f4aec4862f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f3e4a77-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "955f6fcc-8d4d-46cb-85ef-caa50ad3c1ea", "comment": "Malware payload (Mirai)", "value": "25d0591605242c27f2d737ab3c8e261a", "object_relation": "md5", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "88339c9d-4972-42ec-9ce2-f957fcacbd65", "comment": "Malware payload (Mirai)", "value": "666d8973a9eb59ce672cfd7727371548425da4bd38002c06930f8d867938b13e", "object_relation": "sha256", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "87e547b7-6cc7-47a2-bf82-b39c2f2383b1", "value": "T15373B81D2E628FADF7A9823447B78F21939C378627E1D685E25CD6001F6034E645FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "0a6aded5-932f-4a6c-8b3f-1d65f12409fe", "value": "1536:uuT16ORJA194fspAuAWbQ9wXMdUBvcXeZg/Z:uuTYO019NjXMdUBvc9/Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200619, "uuid": "56b8a9de-534a-43c5-a3da-57205173eabf", "value": 80712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "31095918-0360-4a33-92f9-d8e713f8abe0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ffef862-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "83186e29-a17f-4b0a-9b27-f9bb969ddc10", "comment": "Malware payload (Mirai)", "value": "50140411956f16524b91c9ec39d3e470", "object_relation": "md5", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "6b618217-e089-4098-917d-b30318bea4de", "comment": "Malware payload (Mirai)", "value": "9c59f0253c0a4da4c2225b49432fa395b3738389901c402f6316f8b5db862bc9", "object_relation": "sha256", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "775945e8-75e8-4b7e-8ec4-e473fcfc6459", "value": "T12C530891BCC19A13C6D01276FB5E428D332667ACD2EE7317AD162F11778B82F0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "ef9c0050-4f85-4b9c-849c-115624ca6a54", "value": "768:Z5MK4WsXHawudLng7lBbTcewdqVF5WUJ0hVCqYHr/NRFocFAUdJ7MUvg7r0+ifmJ:jD4VZML48ewdMXNJuUAUm5iuKfd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200619, "uuid": "73b043e1-9479-49d5-8e3a-3c02768fbb3a", "value": 60844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "d44794c2-409d-4e93-b985-b016a2acf753", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70015093-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "d7c5a7ff-9ee9-4bf2-b25f-df8b7de208e7", "comment": "Malware payload (Mirai)", "value": "71be3fc27c33dc9d945ced275ea715e4", "object_relation": "md5", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "f75f9550-cb51-45b0-ba92-423a5e742599", "comment": "Malware payload (Mirai)", "value": "61fd3ee11537b9e82d2c8e35593b6f4cd66707775f481cc4c23d8dc9e0b6ebc8", "object_relation": "sha256", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "766a30ab-a2d3-4e4c-9d8a-faee24a33d3f", "value": "T1AE3338C0E64BE8F5FC5646742077E7329B73F93A0029DAC6D368A533A992605E6473", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "2e24de35-d280-4f55-91ce-7fe1e3d3cfc4", "value": "1536:K9pCH13EPvQ7PKVjC6ymlkNspmXmZGb+RjwLS3:rH10PvQ7EjymlE4pZGylwQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200619, "uuid": "9e5c2fa9-c692-4347-baef-acaabcc7bc6c", "value": 54352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "5622d232-14c8-48ea-be3c-2094d23c9d22", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7004a733-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200607, "uuid": "7667debb-74d6-42a1-a763-9135638e7599", "comment": "Malware payload (Mirai)", "value": "134291d2fba5958b7c8c4f8fbb08a708", "object_relation": "md5", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200607, "uuid": "ac02b071-966b-41c6-a371-580cd1067539", "comment": "Malware payload (Mirai)", "value": "a6626bb435e68780973dd4a50adeef84af904a96be2b3e423c3b75c15821b499", "object_relation": "sha256", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200607, "uuid": "30d2d0c7-09a6-4b95-ae40-c918e4454483", "value": "T12B731956B8818A12D5D502BAFE1E118E33131B7CE3DEB3129D206F24778B96F0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200607, "uuid": "ebc3fee9-0220-4fb5-8fbb-98cffec38576", "value": "1536:RNnxyKCJqGVmGsVFyEbZAfiQaaTtc8mIYiXNxNoqC7fw3W5/Y0:9qoGgGsyEbZA6QaWvNXoqC7fwG9b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200607, "uuid": "1b72490e-999a-4d6d-b68b-cc220ad37aba", "value": 75056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200607, "uuid": "6878a22d-9ea8-47bb-98f5-b99a1009ca93", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70040b83-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200620, "uuid": "8ea4e461-1e31-402f-a2be-6f975ba96b70", "comment": "Malware payload (Mirai)", "value": "5012a5252a69cd0c6235284285cc4d4e", "object_relation": "md5", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200620, "uuid": "7969e39a-6d5b-487f-a3b2-5179e025019a", "comment": "Malware payload (Mirai)", "value": "8bbf7f1415d21d66d15700adfbd66a4bde7032c916b5a2bce2c497d8f04d2df0", "object_relation": "sha256", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200620, "uuid": "e3c06bad-cfb0-4266-9735-0dc7e775a3e3", "value": "T1C0532890BC819A13C6D012B7FB5E428D332767A8D2DE7313AD266F11778B91F0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200620, "uuid": "35f6cd42-0d94-4d86-ab94-e6aade01f258", "value": "768:izv8bekhpK7h23tbClhceioot90OmKOVCoS/NRjrrb1qHMkAgr6OuNXn8V3OEv9c:081hpK927eitv7XD7kl6VX8tOEv9L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200620, "uuid": "9209d2b4-6fb1-474a-b35a-4978de5dee9a", "value": 63924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200620, "uuid": "ff6eab2d-f1af-4b2f-a435-6e7671c5a973", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "700d7ff7-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "334d3910-a1fd-485e-a8bc-072e037b9eb1", "comment": "Malware payload (Mirai)", "value": "d31c3bb7ee0f0a7798da47bde1b6e555", "object_relation": "md5", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "46c285f1-54a1-4399-b9b1-ac9e121ff8d7", "comment": "Malware payload (Mirai)", "value": "10c177d688ed4dc7492308f80e632be1de4a723b2352864c178c36320f4d6630", "object_relation": "sha256", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "d612fb94-5797-422f-b837-f9c8deddfaf8", "value": "T104532913B94180FDC59EC174172AA63BF673797D0235B3AE3798FB126D49E214E2E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "31fb8775-c5ce-4a64-87fe-164b2d513540", "value": "1536:CdRZSjx8V2X3+zJ1dBbL/6m2yMiQlSZstb+NBJspqlBzo:yRZS98VcuzJ1nbkyMiBqb+NdlBzo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200619, "uuid": "0eca470b-c461-4737-96a6-c8f9c646093a", "value": 63264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "d99c8697-a67b-4ecb-b1df-3a5650df3257", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3583869e-3fc0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777202069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202069, "uuid": "a4339c8b-b427-4edd-9d7a-a0b76ad216f2", "comment": "Malware payload (Mirai)", "value": "53ef79f8d39e860d9102a69541bc5fa9", "object_relation": "md5", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202069, "uuid": "49fc6ac3-6e4c-4ce4-aeba-b254da6dca65", "comment": "Malware payload (Mirai)", "value": "092fa4059dd7a8ffa28111f98f98f067d95f038ee5e461e1a8ecf3bc9345a4ea", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777202069, "uuid": "f66bc1ba-ab36-4785-acb3-684706ff0cc7", "value": "T1A15171C7216801383CB5D61AB1B6E0CDB4A0405A7DFE1F8A7CEE6CA951EFE056C40F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777202069, "uuid": "0eec265c-2740-4f4c-93e8-f6c1ac2bc5cd", "value": "48:vFTo0MsF+v9lMsFsQsFabMsFNQNFLbMsFI9ZMsF0JBMsFGawIMsF7wsMsFsh5Msb:vFToDsF+v9msFpaZsFSDMsFI9qsF0JC1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777202069, "uuid": "d2bef53d-aa94-440c-8a2b-161a92372410", "value": 2895, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777202069, "uuid": "3215fd5d-2f87-4e6f-b0a0-30b9994e916b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1066e82-3fcf-11f1-bc00-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1777161672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777161672, "uuid": "8f014560-3a63-4493-a37a-a3ad70e8d286", "comment": "Malware payload (RustyStealer)", "value": "64eb7ad3aaf9b6639ccc5c0b30b6e59f", "object_relation": "md5", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777161672, "uuid": "ac07941c-06e9-45ff-bbf5-286c393a01d8", "comment": "Malware payload (RustyStealer)", "value": "9df11356c5ac61d2aa7b5425e6322fc016b0ed5790dacb201396500b3eee03f7", "object_relation": "sha256", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777161672, "uuid": "c4dcfe45-82d4-4f0c-8f0f-dd2a432a0ffe", "value": "T1D7F23B49BB58C12ADBAF0E7D75621A50167197521203CFD53ECC65EEFF937008612B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777161672, "uuid": "52eab4cd-8693-400c-9888-e120daab74dc", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777161672, "uuid": "7004558d-aa75-4f43-ab20-5096cf8a6310", "value": "768:dmQZqx1lYcTYbFyf8qsIVeljnbaoXbYC10kof:d0lYisIVeljRbPof", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777161672, "uuid": "0bb54ae5-7cdb-452f-89df-b5d5564d3199", "value": 36864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777161672, "uuid": "1db114c4-3e17-4a26-bfc5-b366abfe6693", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82b83d68-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777199779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "4eb42441-6c22-4609-9518-63a656f3d172", "comment": "Malware payload (Mirai)", "value": "363cae33612a6e683c67e84a27e3ea79", "object_relation": "md5", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "eef4c12c-534a-4cd7-a9c0-757eca743c26", "comment": "Malware payload (Mirai)", "value": "a43333cd49455d6c65f8bd3ccb910120a345078dc29bc140c7e994bfe2dfbd39", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "9d232189-4b17-46b5-a295-53c7f8f9753b", "value": "T1B8245CC7F801DDBDF90BE73644570A05B530B7A210934B37626BB867FD3A19A0927E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "104d82b4-82a0-49d1-8ad5-7aec68784805", "value": "3072:efwidoWBCUCIRzTOWiQIK+mLKUSQrtKuiA+TySNEW8uzvxDkni/6uipkVVjbi/LA:hidZBCUCGlzW8uzZDnHip5LBByZncbCL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777199779, "uuid": "08906cd3-6421-4389-9423-1621bc741a69", "value": 219200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "4accbfea-fc0e-4e84-93de-6fcf8af0850e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82b9dab8-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777199777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199777, "uuid": "60ef1da1-7e27-4ab1-bd6a-a087c3e979b7", "comment": "Malware payload (Mirai)", "value": "c43b0ee82be0ff1ca39a445363163088", "object_relation": "md5", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199777, "uuid": "d5a14a1b-d1c7-47e7-abc1-969af5fb37b1", "comment": "Malware payload (Mirai)", "value": "731bb915a23f7418429e9badab8a959c4bdaf849dac4e06328f3f323250ae9cd", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199777, "uuid": "168bc831-ca08-4701-b064-824b0e1f8043", "value": "T1EB144A02771C0947E2A32EF0263F27E1C3EFA6E120F4F648694E97858675D365586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199777, "uuid": "864c8c7a-d9c0-4fcd-afdc-5b86edc49870", "value": "3072:/BxImoCB5UyPsZm4Mvq0hPTZ4x4bjnX4I/xsYNcZTU9FenNFnnxffO24FlyC8+4V:/qU92tnx3O/FAf+wGyKAD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777199777, "uuid": "1a417c79-29ad-4c71-bec9-1b55903b4949", "value": 207708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199777, "uuid": "38fb6f14-bcc5-4f7f-a358-e7a9b411586a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82bd3851-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777199779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "a48b1038-c12d-40d0-a06e-29f1915b6f19", "comment": "Malware payload (Mirai)", "value": "c1f77f3a7578c5f02b831abb70792cbb", "object_relation": "md5", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "d6e01244-c0ad-492c-91a0-c4ebd324a47f", "comment": "Malware payload (Mirai)", "value": "affb9974be6064a8ffeb439affdc2e5d565d2aa438120e679de6300b9b618e57", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "cbc46472-1aa6-48f0-a6a0-4bb5f7820e55", "value": "T1D644A71E6E228F3DF768877447B74E25975C23D626E1D981E1ACD2101F2428E642FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "85a4df28-5b89-4a3d-9ca2-fd1c73b30aa1", "value": "6144:qzkfjgjRczSQw1c8JGgaNnm3DUU4oqUr7ZX/ER+VLu3FWnCf6eOtGMyBS:qLPwquE2ZS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777199779, "uuid": "16230366-cb03-4e9d-a081-511f6dcfd220", "value": 266944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "6a227f9b-1e48-4f23-bd4a-00ce35f211d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "838f9610-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777199779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "bf22e315-c59e-4da7-98af-8e35df46bffe", "comment": "Malware payload (Mirai)", "value": "9bfc29154a835933802ca64ab293efc5", "object_relation": "md5", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "8a6194cf-9b71-4b4a-987a-70532221850b", "comment": "Malware payload (Mirai)", "value": "630528dccbf57f83d49d896eee0b12d8381cc6cf74be0ed77583b6b6b620ed19", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "9b844ad6-cb2b-497a-b1d1-e2749429f6ae", "value": "T1ED44E80ABB610EFBECABCD3746E91B0529CC640722A97B767574D914B54B20F0AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "2e96bed7-e340-4271-8b09-b2ea8324b593", "value": "6144:jF2ThdOFRI2HknTDnlkP6DyMTmRaRzbi/xLPamdny5j91FOL3G5JW3fH6SDKK:jF2ThdOFRI2HkTDnlkP6DyMTmcpbi/xt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777199779, "uuid": "13e0eb9d-5964-4c29-b616-39f76ae5a645", "value": 272672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "8ed2a6a3-f51c-4705-a9ae-3035d1cadf7e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8441d957-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777199779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "ee6b348a-ea87-4b9b-8b77-0b9d07968dcb", "comment": "Malware payload (Mirai)", "value": "f56168301db07c72bd0c074c2af4edf3", "object_relation": "md5", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "19b4c2d4-6237-4ff3-afb5-3e0326b5a44f", "comment": "Malware payload (Mirai)", "value": "29a562adc792a2262651f4c870ddaf22a86ad60375b4f185070e717ce3cf3231", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "3a894663-9189-4dc3-a83f-575b56387e30", "value": "T1B1048C72E8296ED9C1659070F0F5AF385BA3A15182431FBB68E7C2B95087D8DF109B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "87594619-37f7-4500-bba7-cd182f0c519d", "value": "3072:qAWepaVWtgTRBLJ30Dm2mJyfqXOhgWAUWMtPUhQXfJ0:qAWeftgTvLJ3Am28yfqeKNwOQXfJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777199779, "uuid": "f16bdda9-1a5d-468b-8128-09bc5827f025", "value": 187172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "6e46d8a1-9a19-40ec-b9b8-b91e764a29d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8440f53f-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777199779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "91d30064-3c2e-485a-8508-519a20200ab5", "comment": "Malware payload (Mirai)", "value": "ca5002bf58624a9da28bafa43a1f2788", "object_relation": "md5", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "bc9f8783-09ff-468a-943c-bbfa130a668c", "comment": "Malware payload (Mirai)", "value": "de84e4612ea713035803bf419b99a5b74871855028e4764ee755d0286a569612", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "43d53ad2-2acc-4931-baae-4f86fcfa7a96", "value": "T150140945FC918E22C6D412BBFB6E428D372653B9D2EE71139D215F21378641F0A7BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "a71cb3a2-e0a7-4049-9cd6-19bcf36f937f", "value": "6144:09rj0/NzLg0om4mtrPVE4FLI+n+f0iievSh:09rANEmfE4BIk+fviT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777199779, "uuid": "a96d2247-21c9-448c-a71e-d6518a427922", "value": 207584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "e649543a-66e4-4f9a-8364-dc966b32e974", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84434c5a-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777199779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "aca743ff-122f-42f7-b9d1-2af12a424f6c", "comment": "Malware payload (Gafgyt)", "value": "2d3eb5b4626ecd8f53c21c3028b9654d", "object_relation": "md5", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "f6c733e7-3bd2-4dde-9c7d-979f6bd67b4b", "comment": "Malware payload (Gafgyt)", "value": "54e010ea45d1b75e0d5dc9da8ca92ec1106b1ed7822a88df758cb146479b2e9f", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "1b473375-9893-4164-bd3c-3bde0ae50e99", "value": "T165A36B12693D1A1AD0D0643202BF0761B5F22BD916D4D99FFE320D5FEE66390292BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "34049b57-5c42-4733-a784-0cddc72b888a", "value": "3072:56t99pCuxc5arTxZIZAG1TjPNZKc87Dp7RX6T:56r5gqT/9MjPTKc879tXI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777199779, "uuid": "bd113d4b-51a3-4cc2-bdf1-412ab46925b5", "value": 100664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "f10b3ba1-fd4b-4ac3-8cb1-79daab12e199", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "844e1178-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777199777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199777, "uuid": "3ee916a0-dbf4-40be-9992-708939c607f1", "comment": "Malware payload (Gafgyt)", "value": "2717940b78a599e32ab7909c9188a4ad", "object_relation": "md5", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199777, "uuid": "0d192a2a-cd64-4016-b23f-52f410868c10", "comment": "Malware payload (Gafgyt)", "value": "a39ce586add5eaac9cf5088326377d267c7d1f149ffbdc9f57de687c27a5009f", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199777, "uuid": "7b669b3c-b7af-44be-a179-971bee318dd0", "value": "T148245C03B58190FEC4DAC1344BEFB636DC75B45D1238B29B27D4AF222E5DE215B2DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199777, "uuid": "84e062ea-f364-4291-aa3b-82f0ccb6245f", "value": "6144:RnOklXE2oag1vHG7L5C6xVqtgN7TFM5Ur16:RnllCY5FGaNY4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777199777, "uuid": "bbba055c-4abd-478f-81a0-21f551e2b3f0", "value": 210696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199777, "uuid": "1f31426f-2a8e-40eb-af58-4a2583d99562", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8457286d-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777199779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "a7477dc8-39c7-46b5-8ad0-965e383a34ed", "comment": "Malware payload (Mirai)", "value": "0d8fb648130cf537cb3b1785ce231d17", "object_relation": "md5", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "1f579e27-0fe9-4e5e-ac6f-38c509314f84", "comment": "Malware payload (Mirai)", "value": "5f89efd0e99a87d8aa01f0b17763e7864fcf5fd1d8714becb9f9dc9114380f86", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "8e6ff55b-2b92-4902-a0c8-8ddd6a19362a", "value": "T1A3241A46F8818F22D5D012BEFA1E128E331327B8D2DE72179D245F24778A96F0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "cccaae9f-5450-4b21-ab35-d288bb27734e", "value": "6144:pl4DsPTaiQoW6v2cQXzv6aTNg8mtNuBVhC+:paDseiQoW6v7QXj6aZXmtcB3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777199779, "uuid": "ee08f665-ca8d-4c0a-887a-0a55b91ac45f", "value": 219964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "38d3154b-80ac-4d4f-b00e-e4eae4b274d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8613d9ff-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777199779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "1e9c0295-ace6-4d52-8595-73629f698c66", "comment": "Malware payload (Gafgyt)", "value": "612f11cf0cd98304796c297475cc9cda", "object_relation": "md5", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "42056503-19ab-4f9e-b30c-f13663779b9f", "comment": "Malware payload (Gafgyt)", "value": "8abe890515771106ce49134035f2ac2ec498fc222527962a218752611ad34af1", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "fba278a5-6b79-4f56-931f-8ed3c0868cca", "value": "T1E6345C42EA418A13C4D617B9B6AF42453333A7B4D3DB730699286FB43B8675F0E73A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "fbed883c-2fa0-47b6-acf9-0cc71d65b64a", "value": "6144:BP7ymmeCaApgsxCFPRa/8AsGZKCEkAiCVTYeWxM/90t/:BPGmmCApgsxCFPRa/8AsGNXiTa2/aJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777199779, "uuid": "b7c2a8d0-3051-404d-84f5-fbba7f5b340b", "value": 234804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "d17d0a0c-1a57-4e5b-bf60-7fe2d7ea3c15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8614f477-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777199779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "0f8fc563-7c09-4863-9f8e-1c4409a93189", "comment": "Malware payload (Mirai)", "value": "a86f430d81e3271296c5c16536b704bc", "object_relation": "md5", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "1bbbcfdb-9a6b-410a-a346-a2ee697917f7", "comment": "Malware payload (Mirai)", "value": "81196c4f41f2b44a7fbff72838a468b638489472ab53d87d7c64d2d286360663", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "a1ced063-e9a0-483d-bec3-04e0e588fcd3", "value": "T169E35CC5F247D0F6E8160474213BFB364A72E536112EED83D7B8A972BC61A42C9277", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "cf73eacd-d050-45d1-8ad0-c3de9350881b", "value": "3072:7bvW8fyeUzg8ySDVS+oChlzWcKhHzo8Kpns8WJD4GYh+OUnKMPa0szW:7bDfyDzgDMVxo0zWThHzo8KpsR4vpUKW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777199779, "uuid": "7afc69ac-a7ab-4ee6-97d2-76344492f34d", "value": 156008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "6183a20b-65f8-4b6c-9d8c-8b5d5648b750", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86309e04-3fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777199779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "03198950-0725-4b64-974a-73b69f6679b7", "comment": "Malware payload (Mirai)", "value": "59c1dbd3a926c5238763732188ff289e", "object_relation": "md5", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "b1b99d08-12a9-4f39-841c-817a5e25fc32", "comment": "Malware payload (Mirai)", "value": "65a73c35bd3aa9862c7774f09c84963354e5efbfdd90806b75bbc4fc5f2c175a", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "02065070-9f31-4784-833b-b9c345c8c844", "value": "T1BD241A45FC528E23C6D412BBFB6E428D372617B9D2EE3117DD211F21378651B0A7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "95ad4622-f29e-4abc-a811-2fc355d83433", "value": "3072:C+Fpn2CE/eGHKx/bMUTz1zEHb2A49Z/ilaeak4efS/beS:FFpn2Cq7KlMUNzo6A491ilai4efS/6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777199779, "uuid": "9e2f37d0-959d-4d83-bd90-3d0bb0cd169f", "value": 211680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199779, "uuid": "bf888277-a91e-4e8b-b07d-103e59e4d3fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4439cbd6-40ff-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777168810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777168810, "uuid": "90fe2ca4-b09e-47de-a7a0-a04b5ede0e45", "comment": "Malware payload", "value": "9ef2eadbd92d38d4b118ce6fafa7be69", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777168810, "uuid": "a7b4cdec-3a2a-4c1d-a25d-40716bba90b9", "comment": "Malware payload", "value": "b201ff339a9dd39bde618a65f9ba93880cd4a301528ba6a2370ea47c9e56e3be", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777168810, "uuid": "94f82564-7b7a-4a38-bc47-aa1dddc52161", "value": "T1CD268D1BBCB91C69C099B17084736605F675BC401B2317D71EA0B6382F3B7F26AB9B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777168810, "uuid": "567d31e0-2644-4bb8-858d-f75684ece0fd", "value": "efdd8fc7b97497af5b131e548ef68c82", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777168810, "uuid": "9e1b15a4-1201-4c8e-be7c-aa4ffe51b7ed", "value": "49152:FaLmcBmiD/kroYkTgpaDLyDmMQBcqqGfqtoENYeYgB7qZOjlkl826iVpmfMR3zct:F/ijTgpJYcG2oEiewZagBHfo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777168810, "uuid": "38ff34e4-8b92-44d6-abd7-ff35d65dbb2d", "value": 4854784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777168810, "uuid": "c321fd96-3bcc-4105-8f4f-4808ec328a12", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9a1d447-4106-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777163337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777163337, "uuid": "4c393271-c446-4430-aaf3-dd7f7a4ca039", "comment": "Malware payload", "value": "33bcd570d03ff5753d78fb9d52fe6b8c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777163337, "uuid": "44082a1a-eaa4-4d84-b89b-e73a238bed10", "comment": "Malware payload", "value": "d84410d2f3f2601eb91451fb420c14c33f3d3dcb804bfcd85fd7dbdccf90da15", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777163337, "uuid": "9ef978c6-b8ef-4431-9c04-5660f175133a", "value": "T1314153081CF742682465213E39B6F25CBB95E1274205E514FC9CDD5C2F60FA60CA7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777163337, "uuid": "69911b9b-362e-4934-aebf-dd3e9e935702", "value": "48:xb9+2UCFsdfJcmLes9yB0qgX1VHNzNkyNg++aONSINYa+/QdpKQDZo+:d9vs+ayBDgzNzNkyN6pNfNYa+/QvvZo+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777163337, "uuid": "563185cc-3700-4743-80b7-edba717c0df2", "value": 2210, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777163337, "uuid": "55996237-84f5-402e-8354-f46d75766607", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee98726c-412f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777180954, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777180954, "uuid": "0dd213fc-5836-4062-b8f2-f7fd7e70426f", "comment": "Malware payload", "value": "7e4b4f80e2bef6f4418d733002a63794", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777180954, "uuid": "0cbf2dd5-bdeb-48db-8a0e-d29f423560fc", "comment": "Malware payload", "value": "7692148b342f62388c8c5d5e41e8a0228315929e4e0299cd65479363a11d570f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777180954, "uuid": "29fe6118-c771-4e18-a8a0-0fbccd6c0ae1", "value": "T14593E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777180954, "uuid": "31c80a07-e681-4492-817f-808e4b61d34d", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXBIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777180954, "uuid": "a66996c9-6241-4c33-abff-48c4cea55bed", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777180954, "uuid": "81cfe072-8593-4cff-9ba2-971361e3dcca", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e834f20d-4131-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777181803, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777181803, "uuid": "df380c93-86e8-44e3-84ef-5972829b8c22", "comment": "Malware payload", "value": "29df8c2929acd6a62ad398766ecf77c5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777181803, "uuid": "1b5d9dda-2dfa-4c49-aef6-a686f58ef773", "comment": "Malware payload", "value": "068fdc468cbe5e83f1fb4fc1fc5da32a92db0a193143fa0b85ee9eab4d84ade0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777181803, "uuid": "b3c3d6a4-8bd6-4d11-a1c7-7ceb6944930d", "value": "T1A5F733F4AF02562DD72A74761B9928F9A82C6395DE63083125CC8E63F01AC9C9FD5C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777181803, "uuid": "f7f0324a-eda8-43db-8eb4-fad7402abe73", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777181803, "uuid": "092be527-333d-46e7-a84d-ff48022204dd", "value": "1572864:nCLdkBehxIIAIWXGy1Qn3f0To0KTVFEPUnA0S+xk15jhrc3Eu97:C2BSpAIW2y1wyo0K5FH6VBhro7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777181803, "uuid": "cba43e91-4103-4fb0-a598-10a2a21e6aca", "value": 70148403, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777181803, "uuid": "f10bb07e-bfcd-4051-8230-95eee81e5b4d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbc72aaa-4132-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777182211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777182211, "uuid": "fe1e8811-def5-4cbe-9dc8-ba6c9c60c827", "comment": "Malware payload", "value": "7e1ec54425c897d1311fb5d514ea287e", "object_relation": "md5", "Tag": [ { "name": "160-119-69-4", "colour": "#946e7d", "exportable": true, "hide_tag": false }, { "name": "45-95-147-178", "colour": "#a61377", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777182211, "uuid": "0df93e1a-1430-4d63-8499-1f1d01ec81f6", "comment": "Malware payload", "value": "69121989616fb67fd8a2ee33e4ad7820c558a074943b0f6ac9006f8a216bb797", "object_relation": "sha256", "Tag": [ { "name": "160-119-69-4", "colour": "#946e7d", "exportable": true, "hide_tag": false }, { "name": "45-95-147-178", "colour": "#a61377", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777182211, "uuid": "04c8bf4a-ffc3-4571-bffb-5d95f666bc7e", "value": "T1D6B2E0F1F8ECA436369D453ABB9CA805A9CF7C2F4DAB7D2014575938411CB1EA019B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777182211, "uuid": "de779a8a-3c72-4391-971d-d681305455c5", "value": "384:ZVc3s1oisjsKG6qkSgjkjV/A4UAcGE3JNRhQuW5Q:SshUMkSgjkjVdUAcd3JN3N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777182211, "uuid": "43757527-a95d-4840-aae7-9290289c2aac", "value": 24175, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777182211, "uuid": "1bccd87d-2f98-4a62-bc0c-330edf8208c3", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4f3f762-4132-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777182227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777182227, "uuid": "a0c6316e-a896-4c12-9368-780d35ad2700", "comment": "Malware payload", "value": "77bb972511c87351aa71b3e7d71dc7f6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777182227, "uuid": "0dc90c41-b3e5-47ba-926b-43359c52a12f", "comment": "Malware payload", "value": "c5bc4adfa9ea6cf82ce54fe2a1cfe35bc1efc9c29499aed7aa787fb8a96b6316", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777182227, "uuid": "7f142040-8c9f-4f28-8ad6-393b409277f6", "value": "T12493193178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777182227, "uuid": "f283d085-c615-4eb4-9cbc-97087a5388d8", "value": "1536:nByp1tF/uwMmAIa14oX/KIlepeV7tb73WdxCrCitkb5fv2v05xWjrIKf/s1kKprW:n8JIe0GitkbFv2v05xWjrj/s1kKrty7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777182227, "uuid": "7e0e93c8-01b7-4162-a19a-38c80696d301", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777182227, "uuid": "425ea562-f234-425d-801f-a1e336d25c9e", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "434869d2-4134-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777182814, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777182814, "uuid": "5caf0610-f3ad-4140-92ff-a877936f8e24", "comment": "Malware payload", "value": "623663efad3316989cd676069e47e5be", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777182814, "uuid": "452b0280-fcd7-4773-9f06-e8ca18b7eff2", "comment": "Malware payload", "value": "477fd792448213fc1b54611e089393a4ed65da01b52fbc665b6552eee472eb6e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777182814, "uuid": "3acc28b5-62a0-408a-8ec6-a0f1fc551d45", "value": "T1247533FE447064AE840F76B823AEEBE7BD1856CD293881D9B080716F319F16C5A74D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777182814, "uuid": "a7e080f3-174e-4a1b-bc61-5171f765199f", "value": "24576:Z27jV23XlY0CXigdTK01JFi73kh9+9Q7S2RoIJ/KY7mt7pzdbCBRxaYjbNyNC/2r:ZO2n1CXiiW01TiENkYQRCrFukwxzj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777182814, "uuid": "f0f9b4bb-7107-485b-90f3-59c113b8bf3e", "value": 1695974, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777182814, "uuid": "2517ddda-e602-49d7-b7c0-d406ad1b0db1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb9c3e06-4137-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777184332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777184332, "uuid": "f866e60a-1f23-4ea4-aa37-3ece127b2207", "comment": "Malware payload (Mirai)", "value": "61e9c71259cb3491c67ad5289e61cf53", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777184332, "uuid": "82ea45aa-89e6-420b-b49a-dbc7e902109b", "comment": "Malware payload (Mirai)", "value": "d5b9defcb563f5e460b2d7814fe31b35e8389033795b5d690d80b40dcdb84597", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777184332, "uuid": "4bc50c15-cd6d-4b46-a358-cd52aef2bd65", "value": "T12744238CCE8BEB994266DE3B2CDAC4B475176BD0DE456C1A9A48D009409C27FFB8F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777184332, "uuid": "1faf453e-93e6-4b5e-b221-50be8669d309", "value": "6144:t3Uiik2HYfhntKge5CtJldwxXjlq+xiDo4y+llmqLiJ:twVHiz5QjlvxRVdqLiJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777184332, "uuid": "f9c53a9f-b112-4dfe-809f-fe6e0359cb9b", "value": 277860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777184332, "uuid": "577fb8e6-09a5-47e4-9583-cda98e6a5095", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8634c08-4159-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777198929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777198929, "uuid": "0149be31-2296-437e-b40c-1b3f24acf753", "comment": "Malware payload", "value": "f2ef8968faea770a48e48a308a290b0c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777198929, "uuid": "4d66291b-cd07-414b-b95d-7bd4bb657336", "comment": "Malware payload", "value": "e22737fa3f80a5ecad6420f406a746d34b2bbee141f4c224fb56bae7657ddd2b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777198929, "uuid": "e89c89cb-8227-4ad9-9fe8-4c44b5f40414", "value": "T1F4E0EDDE7069346CFC007E8334C08B885212F39B2D4B4F49145C1D20FC45578302BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777198929, "uuid": "8e859a23-ed9e-4688-b12d-33a2f92ededd", "value": "6:nUBRXr9UCuyU4IU6yUBRXr9Uh0yU1BFIU57yUBRXr9U4LyU4IIU4hnUBRXr9UeGj:YDIfTHFIAfnIUedIIeu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777198929, "uuid": "a13f7213-7774-4457-b3c1-e013c79f4a6e", "value": 407, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777198929, "uuid": "682e05a9-add1-4762-8591-16e07db232ed", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c36a9041-415b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777199780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199780, "uuid": "7bdd8d64-8da4-4f69-9031-7b9d92ba3e14", "comment": "Malware payload (Mirai)", "value": "200c1d2b72f46e5518ba1fd578a129c6", "object_relation": "md5", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199780, "uuid": "39920016-a2a2-4cfc-8fa0-7d01fbd2a3cc", "comment": "Malware payload (Mirai)", "value": "85e6f2f66c5827ecb7172ff8150872b5e4316ca57f81d858bbce29f4dde4bf1e", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199780, "uuid": "5132eabf-f720-44be-9aa7-b89fc77a84f5", "value": "T1750128F4AD98B03EBCE9BE1C38A54455B877542B35D6388989C63B638598504BDC8E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199780, "uuid": "7fdd1dbe-f3e2-484d-936b-849e9a1580cf", "value": "12:dfJcEKEYk+zfJcEKEa+zfJcEKELq2oNJuEu9WUjJuEuk3JuEuSoNJuEu9WCGLJ7z:lGcYkiGcaiGc+2oNY9WUjYk3YSoNY9Wr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777199780, "uuid": "7fbfbea8-b217-4208-bd08-4c4c84a099e8", "value": 720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199780, "uuid": "1465e197-3a9a-4677-9204-0a2ac84e5298", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df63a295-415b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777199827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199827, "uuid": "983f9ca7-1651-4c3f-b8ea-52171330a25b", "comment": "Malware payload (Mirai)", "value": "eb7d5f12f2e5e948acc9db895acefe64", "object_relation": "md5", "Tag": [ { "name": "176-65-139-46", "colour": "#96a663", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199827, "uuid": "c32e727d-62dd-4553-b21e-e7121751f122", "comment": "Malware payload (Mirai)", "value": "dde8fbd302fef0e38e1474eabfdf124678675ef0718564f5405e6ea5f8d7eba3", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-46", "colour": "#96a663", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199827, "uuid": "9ccc4cae-1642-4c3e-9d96-4c91131e6a16", "value": "T10F859E5AF2F366BCC057C430479BCA629531F07469313DBB36C4DE352EA6DA41B29B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199827, "uuid": "7540cb10-e1e2-4c0b-989f-e8dd56503543", "value": "24576:JIm6s9iXre2zxHLZNgysMOvh7922sZJSuR1lY03q/P:Om5iXqarZNgQ09nkJ9Rw04", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777199827, "uuid": "0d3b50f1-d0ea-4886-8a65-71933fd7933b", "value": 1801656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199827, "uuid": "c16d3824-7225-4489-8f8b-9e75dbfb43ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "725ce006-415c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200073, "uuid": "fbcb6cc0-150d-4430-b11d-47ac27cde2af", "comment": "Malware payload (Mirai)", "value": "cb72a814cc9f7f3363fc62c98fc4b74c", "object_relation": "md5", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200073, "uuid": "4b3e99a5-6f9e-4f04-b766-cb8b4b5c9fc7", "comment": "Malware payload (Mirai)", "value": "8de046c6f9f59297820fb6ddd1cbc48bf09c8eb01a3a453f194430bb151a43f4", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200073, "uuid": "6077b4cd-605d-4239-870b-8f903c0eb6ae", "value": "T13F3319B51516F2BCE9E22078F40720F529530A1C3ADCE2D3B0930579FFB5B48B96AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200073, "uuid": "b49a8fb8-847a-49c8-8248-bc0b85ae576c", "value": "768:zMClhMqB0yBuKw3GoACzQyZRtlkABYxQJTUnRNww31:zF0vZ2oR9DtlksYiM0s1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200073, "uuid": "144b65d1-04b7-40b4-ac15-dbfab7f81d48", "value": 50632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200073, "uuid": "86adf2ba-a0a3-485c-a60a-0294ee056713", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "726e2592-415c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200073, "uuid": "b4e6095d-d721-40e8-bb8f-79d999c5e50b", "comment": "Malware payload (Mirai)", "value": "9c20cabcb716957e9d8d797a17f2397d", "object_relation": "md5", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200073, "uuid": "d1f11922-5fec-4f63-8b68-edb51eae4289", "comment": "Malware payload (Mirai)", "value": "3cb6ec46149f927f69c503048c0d7871942407eb5609b3093331d6ac9bc9f546", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200073, "uuid": "e9a53007-4f12-41ed-a359-93cda96fd1ff", "value": "T1F443F89AF9C28A15C5D412BFFE0E118D3313676CE3DE72139D205B246BCA56B0A7B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200073, "uuid": "80e54901-50ec-4756-b948-4ac4f2967993", "value": "1536:bUnzbXpccgjHZwzsfU4gDkzoI+iYtnRK1rL:WXOcO50ietnRK1r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200073, "uuid": "29dd5e6f-4669-49ab-8f3d-d819feb67b3f", "value": 58744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200073, "uuid": "21e76088-c932-4c2e-86b7-557c80fe33c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95c4e346-415c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200133, "uuid": "6c7ef5cc-9a5a-4a20-ac17-4476328458e5", "comment": "Malware payload (Mirai)", "value": "02e1ff315d77f1ff045ad31bd761520d", "object_relation": "md5", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200133, "uuid": "569618da-19d1-461b-8aed-a089afd2a559", "comment": "Malware payload (Mirai)", "value": "2b43c5f67ef9646442cf034174913637eb1489e29f37f66444d710bf05240214", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200133, "uuid": "c4490289-8c2e-49fb-871e-9efca09c9067", "value": "T1FE231894B9829A16CAD0437BFE0E42DD3725A398E2DE3313DD225F6137CB92B0DA71", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200133, "uuid": "0cc0e6fe-fdd5-4054-8465-170ec5d96a64", "value": "768:mXYesyi5wPVQEkJVvOwxPFV4iRu6Jj3oSCA6gPj5+uB4Pl5Q1wL0xkbUFqBgEk9H:jZe4vrR476JdLPj5+uBalu1ObUoBEH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200133, "uuid": "09945fc9-542e-4507-afda-ffe9d11e8f1d", "value": 47940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200133, "uuid": "a9a552b8-6555-4187-bf7c-ac06d45b4180", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95c80797-415c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200133, "uuid": "beaa9313-f3a2-4a1c-863c-c49524fbb8a0", "comment": "Malware payload (Mirai)", "value": "dfa6b1c84e524aa1343fca353015311d", "object_relation": "md5", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200133, "uuid": "69617c32-5e1f-431c-8b7d-fd2d368eb62b", "comment": "Malware payload (Mirai)", "value": "ef48dd2be42973fde4cb2637e16d1b5f7e3cf56e27a55aef079b995f4a971edc", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200133, "uuid": "19177920-b891-43da-b1a8-49c26c8385fb", "value": "T1DF231894B9829A16CAD0437BFE0E42DD3725A398E2DE3313DD225F6137CB92B0DA71", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200133, "uuid": "f4ac95c5-5308-4440-bfb6-e79de6f7413e", "value": "768:UXYesyi5wPVQEkJVvOwxPFV4iRu6Jj3oSCA6gPj5+uB4Pl5Q1wL0xkbUFqBgEk9H:VZe4vrR476JdLPj5+uBalu1ObUoBEH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200133, "uuid": "4d8b683c-65ae-4cc0-b1de-ce75700c2b8a", "value": 47940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200133, "uuid": "1ca85201-1e7b-4cbe-9caa-81148bd9853b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd55b398-415c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200199, "uuid": "7c60e549-c5b1-4343-b271-f95b32ad11f4", "comment": "Malware payload (Mirai)", "value": "112b9834d213f6be3f7f8682f1c53377", "object_relation": "md5", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200199, "uuid": "207530f1-52c7-405e-8855-14a9caae665c", "comment": "Malware payload (Mirai)", "value": "1c045921303fba7c37e7405af3e7963153518a433f5c9a95fd272aabf031b8d9", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200199, "uuid": "b18b9e68-eddf-4993-bc25-d37f0284c5f2", "value": "T123330A997C828D2AC5D012BBFA7F02E9331563A8D2CB7313D8149B587E8A51E4F677", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200199, "uuid": "7bd21a2c-1d82-41dc-8419-b28e7f701b1f", "value": "768:Uo8D636IXLb1aG+xC3pXNyTtL9SbOQuw5lCM42zJWzRTW3t3lkXiKcP4sxILIxas:Uo8G3NLIxCs12OFw2yzJqW3zxILIE63", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200199, "uuid": "837a52ef-b638-4ac6-ac23-b089cf2b1924", "value": 50287, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200199, "uuid": "b5bd0ea2-37bb-4dcb-96a6-11c670e064a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e262b574-415c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200261, "uuid": "44cd6a46-9866-4cee-8370-ca6c258c2b9c", "comment": "Malware payload (Mirai)", "value": "f45647827f076facf8c0e942a3cd37ca", "object_relation": "md5", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200261, "uuid": "6e655332-9cee-4f4a-a76d-b96f6196798a", "comment": "Malware payload (Mirai)", "value": "fcdf088bda5fc8af705ecaea2c8e37f4575005548f3798847401d2a220d64dab", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200261, "uuid": "978cb577-302c-4729-84d1-085e28a1b32e", "value": "T1FF1339C59A43C0F1EC1112F110779B519FB2A436AA79FB47E7A93A32FC02B1196173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200261, "uuid": "74fe7906-47db-4a0f-b0bb-23ec7ef1f9e7", "value": "768:x73jOIDzzrq7WiEu+RiUjrekEx63a7x2Yq1z7yvEdTpKMxn:FjOAzwvEuP4akEgwjkWItKKn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200261, "uuid": "e384982f-84ae-423c-bc46-51ad61513258", "value": 41840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200261, "uuid": "5d85dcbf-fb66-4c8b-a1b0-9cfbb4d1a8dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e271f1e3-415c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200261, "uuid": "e6af5da9-e20a-4531-bddf-3a26fa70dbf1", "comment": "Malware payload (Mirai)", "value": "c0fac1f3e9329e7d9a0399b871e82670", "object_relation": "md5", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200261, "uuid": "0753b135-a346-401c-bf43-4ddaaf7f5541", "comment": "Malware payload (Mirai)", "value": "3cd3b2d154d601f8726e888ed88f975ff7fe6cef8beb7c93521d8c95ab664707", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200261, "uuid": "b99b4cf7-aaef-40d4-9375-495a654a34c6", "value": "T14D233A49C703C1F0D8861570507BAB7AAE7AAC325570ED5BEB983A26BC32B11950B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200261, "uuid": "02ed5ade-8e63-4277-811e-1534c51ee48f", "value": "768:sXK15wniDa6PO5+m0h5phjprJzm3W/NqNd1UJwlAscucuN7iKlkH1GsPK9K:sXK1KIfPk+m0rpom/i9cu5CGsiE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200261, "uuid": "5ea07718-7ad3-4a49-a561-2613827909c5", "value": 45728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200261, "uuid": "33a9f7b8-efa5-403a-86cf-afebcd282b52", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05863476-415d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "ae0c50ef-136f-44dd-8a14-74f0ec70c0c4", "comment": "Malware payload (Mirai)", "value": "b90621e352d8d1fdc8210e18c5f905e1", "object_relation": "md5", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "96b72590-00b7-4360-aed1-61b38f108953", "comment": "Malware payload (Mirai)", "value": "35a35ab7164f8b0c2a41db0f72fd23b34c91e5a10699e86db44c502691ccad61", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "c2d576fd-3d70-42f1-8a11-074ebe675556", "value": "T188039E53C93A2D94C63985B4F8219B7E2B53E949A5936FD6D826C274C003F9CFC2D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "5b536a43-2658-45cf-9b47-cb9de9565fe2", "value": "768:iTUc2eBs3+EuYG6TKjj53iGH/AEd9AKblZ3ay3VJ5egoS6VnYUvC5YMy3:4D3BsOEw5FLdQS2rCje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200320, "uuid": "dacffbf5-32f5-47f7-9c97-7c118c949b95", "value": 39908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "47654ed5-6d4b-4b89-b40a-28ddbb067b10", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "058c9f93-415d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "61610d1d-e43a-4697-8a6f-1681dc8f6f43", "comment": "Malware payload (Mirai)", "value": "8df9469d147ead70996acd8c99feccb5", "object_relation": "md5", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "e6c26602-4102-42a0-9190-e4a01ae2f485", "comment": "Malware payload (Mirai)", "value": "f44a1ba5fcb4a478430c8148dd1f197d56959e58a16058096f8c88710942ac26", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "a5e54c82-481b-4158-835a-1af0883f17ff", "value": "T183131742B3180547D1631EB0353F47E1E7ABAE8122E4F288760F9B4DC171E77A946E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "e4a5a1b3-78fe-4225-9c79-a03e4eae7bdc", "value": "768:TuZQBal6xzFogyxBvDMjccDP1UqI9XFPTMey6/janpyvsM73V+Otauo:T0UFogW5DMj3DyqWPwey3nYx73V+uaD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200320, "uuid": "169089b5-0243-4932-9942-39d558445ba1", "value": 44168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "990dca2f-41b2-4a47-8917-443aa12ecd26", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "058cff2a-415d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "712336f8-4d9d-4ef6-a4c2-35cdcaef295a", "comment": "Malware payload (Mirai)", "value": "3c77eefa2b6406df2c40c45074df4bc7", "object_relation": "md5", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "219859a5-7423-433a-9247-0726627e3831", "comment": "Malware payload (Mirai)", "value": "460812e89bbe0740f0eb7db2e387a5380210de3d6fd038037a7eb7c927e5e515", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "a0ac49d2-76c4-499c-8dea-5b936390bbd3", "value": "T1912329035491C0FDC955C230AB3FA636C922F47E123AB59D73E0BE226E4AE311F5A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "9e61be36-459c-49ab-8107-b5a138d2d45e", "value": "768:FkrR8ysZAY+OGZZRw4xSwPtKOo7vHjKRDACGyjltp4B6gC:6d8y2+OO5yDDckCGyp4B6gC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200320, "uuid": "4f9dc094-1ac2-4ecf-b444-5a51958cfb64", "value": 46400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "e7094dac-1ffd-4b9f-8a68-2c5368b8fb3a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "059135d2-415d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777200320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "ca1d091b-5d1e-463f-a48a-bc8c127d30a3", "comment": "Malware payload", "value": "8b43394f7cc2827b69051ca879517f6c", "object_relation": "md5", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "8e7c0b71-d2de-49fc-87ca-995e5e039bf4", "comment": "Malware payload", "value": "0fcbbe433ab1b3cddf82078b0d343478fdb48aa59a10e0661a96ea93189bd3be", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "edd0dd14-1dd5-44d9-85b2-bc6c92c76b35", "value": "T118011052D7D290073ABC89A9BAA4A18CD50C348336929098BCDD1660EFB4D5F30F1F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "739b417c-d865-412e-a96f-6420cebcf458", "value": "12:jGmmvPdnsCGMOd2z+fQk+TfQwWflszP01WQN8QNTZQZ8qTogUIKjiqvSj:5eVYMY2qQkKQwWfFlDTZC8OU3Oj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200320, "uuid": "964ccab5-be0a-426c-9fa8-2660415a1ffc", "value": 771, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "66c17aad-0a27-4a10-993e-08fa06d1513f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0595c3c2-415d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "99cfd080-458d-4f53-ad22-6c3358363504", "comment": "Malware payload (Mirai)", "value": "ab52f438caa88ab23ddea8660bf37afb", "object_relation": "md5", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "37f6b162-588c-4530-acc8-9244ddcd57cf", "comment": "Malware payload (Mirai)", "value": "b35623f5047d18a36bf0da2c07515d63b349731687fed17391e5e60489eebd93", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "2bf32018-b3d0-462a-98e3-d038d792df04", "value": "T1B3133AC1A643D1F2EC5212F5147B67628F76E4364A7DFA92EBA92531FC03B10960B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "fe0a9539-2f91-4c40-8d2b-925dc69c36e8", "value": "768:QQaiSup66OkEgy5oD5YQuj4JEUTeU4wQOncspVI/4bOGd7nX:QQaiSuptOkEX6D5YQ/JEUeUDtcspDbOY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200320, "uuid": "16a4a6d6-711f-4647-bc03-e534273114ce", "value": 41840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "7f05abe8-e9e5-4f38-945e-66c3aab65b21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0595f15e-415d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "e82cbd7b-71d7-4ba6-a62c-1d0f8acd013c", "comment": "Malware payload (Mirai)", "value": "1b0e84dc7fead555bfcff467c8e4dd71", "object_relation": "md5", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "e71a447a-a756-4085-8e2d-502cff788930", "comment": "Malware payload (Mirai)", "value": "ebea3445ebf7d4184a75980a21a4d1e4e764117072180c6fcc213a285c0bf741", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "b7eb2438-9c5a-48a9-96ca-24932a09a3a8", "value": "T14C53831AAF650FFBEC6BCD3745A91B49349C640A12E93B367934C818BA5B20F45E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "fadc0ff9-25ad-4210-a8f3-1dda8020123c", "value": "1536:yGtQ8AKyjOz8lI/DXUAF/MSL3bKL2LZgsF8qD:yM6KyazQiDU5L2LB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200320, "uuid": "234315bc-07c0-4155-adc2-88b85280b403", "value": 64380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "c7e46358-23df-481c-b9e5-421b30c240d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05993ed4-415d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "205dc25c-53c9-4773-b604-281e7a9c37bd", "comment": "Malware payload (Mirai)", "value": "dd777d70423b06834d1f5467e78e4e9d", "object_relation": "md5", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "1118caf3-a42a-4355-aa7d-e5dd28197aba", "comment": "Malware payload (Mirai)", "value": "b7e2d94c0de4d571750ab7ce2f0bb1eee7cd8c45c9a2c0018440dabe32ba043e", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "cadb48ac-59ac-4b41-844c-b4057c8a4eec", "value": "T16D53941A2A258FADF76C873487B74E229799379727E1C644D15CEE001F7038E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "5764df3f-fa9a-4576-a8be-2ab1ee1a1988", "value": "1536:dMBsSfxM6HdeKImzB1M116Bc2ueZqf3J3J9:afLHdeKFB10eZEZZ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200320, "uuid": "c1b1347b-9115-4a85-b72f-9bb39c5deaed", "value": 63660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "8218a788-1243-492b-8dfa-0e9b3dae37b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "059be317-415d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "79b1b341-51fe-40da-b3b9-31c034ee69e3", "comment": "Malware payload (Mirai)", "value": "bd2701abf974ca122ffd1f9a17e06e26", "object_relation": "md5", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "bb1d5ec0-f6c0-4c6e-a71c-ca010c4407aa", "comment": "Malware payload (Mirai)", "value": "0006adae5e1b13f11153125bc7ecd2816e03fc0142634646625a1ca9b7c29390", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "1a57f610-6773-40fd-bbc5-3de6289f1847", "value": "T140333A35B6752A1BC8D8987D22F74328B2F4168E28F8CB1F7D720E4EBF6085025176", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "26f06ec0-2d60-432a-b75a-6cdb5e681e8a", "value": "768:vj72UF999I26p/d1DNwm+B54HpX2KlNhdtBBYmhju/QJwO+351TSOj:v3pF1IDp/nNwDB54HpmKlzB+mIQJa3e8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200320, "uuid": "fc77baed-20cd-4fb5-9d6a-2f62f366f890", "value": 50256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "5b1cfaea-1e7e-40d4-94e1-a6fa8ceb5a16", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "059fcfa3-415d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777200320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "fd66a141-7065-410f-861f-df6cda916f10", "comment": "Malware payload (Mirai)", "value": "c6dd5eb61041ebddf2238a1f2061845a", "object_relation": "md5", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "c4188cfc-7d35-4193-b573-bccb8728f007", "comment": "Malware payload (Mirai)", "value": "3bf68c02f337c6cad9c677c2c116763fdb985f1ff207e99b47a4bb240e3b6b0b", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "b0232a55-8a86-449a-8488-852507321e73", "value": "T167133A92B400AD7DF85EE73EC093090AF131A79551831A3763A3FD776C322A85D76E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "d4307950-d7e4-435c-addc-0d3c05943d85", "value": "768:0xqFTD4t0MoBjFAWEw0Cmk+3o+6WluD811JtTRHGtHwl5bsW71:COaWVOWLHV06WkD811bRHGtwlXB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200320, "uuid": "468509b8-1242-4d90-ba5e-08653d971635", "value": 45516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200320, "uuid": "325ccab1-70cb-41bc-b4cf-f2ed29f58d2b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7c91f79-415d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777200619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "2141861a-3a46-43b2-96f7-564abe6b0449", "comment": "Malware payload", "value": "02b4d37dffd7a21b52001d544f65a31a", "object_relation": "md5", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "380639e6-bcdf-48f0-b770-213aea4c705d", "comment": "Malware payload", "value": "dadc5d82ded96e1cb2a84c273ee24cb3255d92875f187ec84d6f03f3227fbae5", "object_relation": "sha256", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "3c9b9320-e113-4d39-b63a-a1d3c3596b97", "value": "T13BE0C284049280085EF3563D8AE651E0D043300134307E79E1B6C3539BE82C03B72B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "289f8b17-7551-40b0-beba-ff618a27e9df", "value": "6:hdcGr6Uc+crmTRQ5xymY2s1aFZnElYVsgeafaIg+l5blzY0W:XA6DTRQ5xyL2s1OxxVsXaCR+l5blzY0W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777200619, "uuid": "64758711-e285-4c96-ba6c-0d27719b10f7", "value": 319, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200619, "uuid": "e2a5a0c8-46ca-4f88-a81d-2abcb4d12132", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d66acddd-4163-11f1-bc00-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1777203248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203248, "uuid": "4914efd3-507b-4071-ba9b-06498e8aa7b9", "comment": "Malware payload (Amadey)", "value": "63a4b68247d851355a3d3edac8c0220a", "object_relation": "md5", "Tag": [ { "name": "91-92-242-236", "colour": "#ce3199", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203248, "uuid": "cd8b9444-90aa-4ba3-a0ed-8c7dbcdd9d55", "comment": "Malware payload (Amadey)", "value": "b27ecd6a59c7d2471f7d407567d1b33068845ec89f5e0a76e18dc720cc69e80d", "object_relation": "sha256", "Tag": [ { "name": "91-92-242-236", "colour": "#ce3199", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203248, "uuid": "0a4ab2cc-9200-4288-a4ca-e6cf4708d527", "value": "T156359D16B941C071D49401706269BFF2593CAA35672145DBFBD02EB2AD305F3BE3AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203248, "uuid": "d2006ba3-9aaa-44b7-9a35-bd637b264eaa", "value": "a252cd53ebc44617e8418747345d10c1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203248, "uuid": "3de42e81-642e-4c4d-8818-30e3892cd310", "value": "24576:5LCrua2InCFeiwzFJEUoBmx4I1bzNEhzcJZlZ:5+ruaRnC0iwzFgI4oJZlZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777203248, "uuid": "53c5e7a3-689b-4e19-a743-8a87cee9269a", "value": 1102336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203248, "uuid": "c265abc1-674b-41c1-afb1-ed3b4bb708c2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb4fe697-4163-11f1-bc00-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1777203309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203309, "uuid": "3dae662a-6aa9-4301-9099-ffc8ec375e09", "comment": "Malware payload (Amadey)", "value": "8cd556280f0c682210bd44be4555f0f6", "object_relation": "md5", "Tag": [ { "name": "91-92-242-236", "colour": "#ce3199", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203309, "uuid": "2adfcf30-930e-40eb-b35a-0ff1ffbaa640", "comment": "Malware payload (Amadey)", "value": "3bdcb32460e5a613c35b14205e4a98ad50a03a1d7d17f4c30f2935c6f6d5db69", "object_relation": "sha256", "Tag": [ { "name": "91-92-242-236", "colour": "#ce3199", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203309, "uuid": "e7e7b2bc-1617-4340-885a-5eac7e8c5763", "value": "T150557C0BA26141BCD4BBE1789A175A47F775704603709AEB07E446A63F13FE1AEBE3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203309, "uuid": "ff11c0c7-59b3-47fe-9e39-951ee16c1fed", "value": "3f175edea93fa7a76a78004d12de2235", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203309, "uuid": "dfd0762d-6bbe-492b-973b-fd9e60d12eab", "value": "24576:HrR0NaOy0mK9yCksn6JCc2YkxfUyamitsDw+mLRYhOnW:HkHmiyCkhh2Bamituw+Uy/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777203309, "uuid": "529f87ab-7d00-473d-af2b-4960ad3bcb30", "value": 1282048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203309, "uuid": "58053042-ea11-4c58-80cc-3cc59b4de24a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01dba99a-4166-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777204179, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777204179, "uuid": "e4d3c9a3-f72f-4086-8bdf-4947717874a6", "comment": "Malware payload", "value": "ca700f8bb843815dc0f1ac310e4ae76f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777204179, "uuid": "7879f5a9-220b-4f55-bf99-864eb953541a", "comment": "Malware payload", "value": "aac9d2a30dede73bc7f9cbdb1353da8141c276fd18c9edb0dc54d5547494b81d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777204179, "uuid": "8d313d8c-4a21-42bc-a9bf-30909496aa55", "value": "T1205423CE287E76A266F6B7BDCA3578CD35ACD27289942CC7346C8E1260771024D91B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777204179, "uuid": "d15ab172-32db-4ab6-a48a-0aca3dcfb76e", "value": "6144:Ve/kO1iCx0n/MuDpZ5UaJGu+St7CerpJObMc04HvfMsNGd7QNFo:Ve/kZzrGmtWspJObo4nMsNi7QNFo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777204179, "uuid": "12589152-15d2-495f-b757-bc45b8643001", "value": 290220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777204179, "uuid": "faeb3243-5dbc-4e75-bec9-1ace0d699314", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7140a34d-416a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777206084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777206084, "uuid": "bee3ac07-41d2-4ec1-bd78-e7063905c39f", "comment": "Malware payload", "value": "593ddb891616b25d54c4ba391109170e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777206084, "uuid": "deb8ee34-23c1-4a6b-91e1-60292dd63bd5", "comment": "Malware payload", "value": "0b3005313f160311277dabc21167ef4285afdb861b2b7bbabbd7e115563873c0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777206084, "uuid": "4f621de1-7f5d-4568-89ba-530b6259665a", "value": "T14F93193178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777206084, "uuid": "f0cfa1d4-ab69-4190-98b7-43be1bc25865", "value": "1536:nByp1tF/uwMmAIa14oX/KIlepeV7tb73WdxCrCitkb5fv2v05xWjrIKP/s1kKcrW:n8JIe0GitkbFv2v05xWjrL/s1kHrty7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777206084, "uuid": "783b2384-d9f5-45da-aef6-07a883193ac2", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777206084, "uuid": "0355f5f3-4ec3-4dfe-b928-f44a2b4b5bbb", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a182a33b-416b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777206595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777206595, "uuid": "89aca2f0-e320-4f1a-a025-940bd46efad8", "comment": "Malware payload", "value": "52ef34061820181bba660147f082da1b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777206595, "uuid": "e00b7f62-3ce2-44d9-9180-a09e153e7aa1", "comment": "Malware payload", "value": "e75334122bf254de11b9ee0dbb5d12178ab069c4acca0f0076e6fbb805833b38", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777206595, "uuid": "9ee4a0cd-0c27-4321-a809-a29645929d91", "value": "T1438309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777206595, "uuid": "bc1870d1-0de0-4853-bce8-a8af28eb6ab4", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbndWaVVN/:XEKltp9txAX/yr2pbdWYVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777206595, "uuid": "0748502c-a3ca-45db-b579-5bf53c73bff4", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777206595, "uuid": "d77d6e85-3045-4c4d-a9b1-8f5fc9be2a5f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aee4832d-416b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777206617, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777206617, "uuid": "e1384293-2c2a-45e4-9c6c-4bfba918ccbf", "comment": "Malware payload", "value": "b2cf2b018070dea3ec0241aac84e60a1", "object_relation": "md5", "Tag": [ { "name": "176-65-148-212", "colour": "#9f1044", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777206617, "uuid": "efe44683-7d07-4428-a73f-ae45ce17af5b", "comment": "Malware payload", "value": "8ffec3140d5d6256d76d0c2e598651bd94521fb20b48201855fa338bc0c28d3f", "object_relation": "sha256", "Tag": [ { "name": "176-65-148-212", "colour": "#9f1044", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777206617, "uuid": "e5b3dd65-5d60-44b0-a720-2fcf59fade93", "value": "T160068D03FCA505AAC0AFA232897356927B71BC490B3023D76F50B6782F72BD5AD797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777206617, "uuid": "ecf222c7-7566-42ae-873e-ed65dbca9195", "value": "49152:axoS9Wmch+E994U/ecTZanmONU562QulsCWPcn+INh+KR4GV6xjMLJ/OH04:axjWH+K62QulsCV+whpR4G2jMJB4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777206617, "uuid": "67991ddb-0e82-49e6-8b14-46cbff149f1f", "value": 3905495, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777206617, "uuid": "fbaa8d54-90e0-4ba1-a419-0aa33c2dd7df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5bb001d-416f-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1777208347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777208347, "uuid": "4455736c-b1f4-436b-b4a0-29f8d33e96d1", "comment": "Malware payload (ConnectWise)", "value": "ff359f10b7f27d8b1d980aac02c396f9", "object_relation": "md5", "Tag": [ { "name": "176-65-132-139", "colour": "#89b7e2", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777208347, "uuid": "f4169ef2-638b-4a8d-89d8-500c3509b523", "comment": "Malware payload (ConnectWise)", "value": "e07ec2972ab4a52bde76b80dd46fbbf4fbd8ea79585472ccb12a8b23e833ebc4", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-139", "colour": "#89b7e2", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777208347, "uuid": "0fc6d6fe-d72d-4fb1-8044-7ed4d2f0963e", "value": "T136646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777208347, "uuid": "51108244-5b4c-4124-a50d-26f373d317d9", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777208347, "uuid": "e7842416-44cb-4108-ab52-84699d07c87d", "value": "6144:ymlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9s:R1iw7gryNkSV1hy1Z1u2JLu9s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777208347, "uuid": "c9175e3b-cc3b-4dea-b0af-ee26f6f99835", "value": 312544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777208347, "uuid": "c7899b5b-d7df-4345-ac46-6f62285fa30b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2938ce2-4171-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777209308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209308, "uuid": "4be941e1-13f7-441a-84a0-63804b6ecd87", "comment": "Malware payload", "value": "20c6061af90fd46562c3d4655d79ae02", "object_relation": "md5", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209308, "uuid": "ddc9a43f-e738-4a3e-816e-20cd1227b96a", "comment": "Malware payload", "value": "99ac3a9c439c1692a9ea8f8fd11fc7f3c3eed9da4bec4bafc461680a14143ede", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209308, "uuid": "1466e3c1-4cea-4943-863a-28dc11475e24", "value": "T145E09265E8C084BFA0398968BBEB7D59550F2112854B352D9BBD6442E8B8C4454129", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209308, "uuid": "0833856e-3c3e-4d95-8ed6-cbc97a5fb6fe", "value": "6:/2DpUnTAJr1uVYrWXZrOYB3F5/iOqVKhOqLsVKlR3iVVNMKRaiVfvOZQiOiyiiO2:/2LJr1uE/YBitgh1sglRyTyKRaitPi5+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209308, "uuid": "12bf4faa-bdbe-4b46-aed9-c885986ab509", "value": 374, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209308, "uuid": "236d1687-1de7-4671-a7ec-1ba7dec3f324", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5a68f4c-4171-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777209313, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209313, "uuid": "dc7e206b-4824-4bfd-ada3-8ea761c59f5d", "comment": "Malware payload (Mirai)", "value": "c9a708cfebd00f438f1c857989de3c68", "object_relation": "md5", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209313, "uuid": "35ed2fad-cae5-4333-b6b3-077e508e029b", "comment": "Malware payload (Mirai)", "value": "da21fc59351a8601fabcc66483ab193b29b7a55be4cba08ab707901d4c98ad2a", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209313, "uuid": "bc625bd1-0792-42fe-9a6b-2cd29264e327", "value": "T1DF41538E60F06261E6DCFE0470E18DC86385F591639F2A7ADEC12EEBC4DAD467019B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209313, "uuid": "f2d04192-5657-48d7-8ea6-c16f1bfe1ae6", "value": "48:sQKQGQkQWQLQ3qQ8Qw1lQLQg5QvQHaQoQ+QsQWQ3QSQAQSo78QhQPqQSQqQ/QeQn:HtB/Rc3NXw1ucgK4d7ZHRg1zSGSl1NId", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209313, "uuid": "facc4627-6386-4321-b2fb-8ca2e371adb0", "value": 1901, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209313, "uuid": "f96f8408-cce7-4d72-b359-ee7b9f661ca6", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f677fee3-4171-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777209314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209314, "uuid": "b1b6d560-443a-4c18-b6cb-2c348df3dcad", "comment": "Malware payload (Mirai)", "value": "9b24e6dc096d7e69089e13f5d204b005", "object_relation": "md5", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209314, "uuid": "2343628f-df5d-4a97-b254-95fdb527d9f2", "comment": "Malware payload (Mirai)", "value": "f4dd308afa59f568c311567b607d2f4aada56fe51b73d0476af6d2fd329a7c0d", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209314, "uuid": "d6161e2d-fc1c-44e7-bec5-5dbcf1407876", "value": "T1B332C517A7BBAE1BC4D037770193072162E99F916024472FBD0D1C8E6E9B3412D3EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209314, "uuid": "262657e9-90dc-4590-a513-901a7a60941d", "value": "192:xvrOR1CQOsz1NxfAzMH9iG0GhWaDpU/O7Q89AGSyb/qeif:xvrbCzfaM2GwIU/kwGScUf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209314, "uuid": "bcf1ff42-36dd-49f7-b683-fb0ef387b7a1", "value": 11024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209314, "uuid": "9e971fc8-d4c6-4c07-b834-db1c2a33ae36", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8fbe1ea-4171-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777209318, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209318, "uuid": "1e52429e-4d33-47c7-8669-f51a7b0791c5", "comment": "Malware payload (Mirai)", "value": "492f1c23b6bc9e3740b2740206af3f01", "object_relation": "md5", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209318, "uuid": "ee75828a-528c-422c-8c95-194fc65c3dc7", "comment": "Malware payload (Mirai)", "value": "8bd7a26b5cc77024c44e5d4de44d63a05cee9030cde6395042ceb52b5b0c119a", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209318, "uuid": "a6bab308-1602-465c-af02-68da16bed3e2", "value": "T1832301C3726FDDF9CBF6493D281BC9D8BA0181197F0A0BDB419E22D8AD685C23E125", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209318, "uuid": "e8b6ecf0-894f-4ebd-a504-fa4812d6ad2a", "value": "768:rYlu1gzShvupCJk8hRIE3kpNwWa0xeKyxEy2e0baN/fCzJA4y:JSzSxupEl3kpNTxe32TaXCFo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209318, "uuid": "b5598900-c0a4-4606-986e-0ae1459f3dab", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209318, "uuid": "93f668b8-2d98-4fe1-8691-5edd623ca1cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f912c9ee-4171-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777209319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209319, "uuid": "c0943f9c-26ac-404c-bd98-a4609b6cd755", "comment": "Malware payload (Mirai)", "value": "11d753231c3e06ba7f32459334f940e3", "object_relation": "md5", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209319, "uuid": "3cc0e38e-01f9-4e32-b828-1160ab4197da", "comment": "Malware payload (Mirai)", "value": "5b878a5eebe22b55706fbb268fcd5325a6061b8d3873ece8d59c47f0e2f894a1", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209319, "uuid": "462e19dd-85b7-4683-a657-b5d90bad52a2", "value": "T188333C4DF783E0F0DD4B0531115BF77E96349E025124DE7EEB98BE62AE32A0271176", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209319, "uuid": "abbfcc63-6135-4cf0-ab42-248eaba28e5c", "value": "768:VwheNR1eCZWUJ2S7pRflrFWwqTlFNB5azjYvzNeVMU2331ANA0B7RhuqDV981N+s:VwOt37pOzwLMU431ANA0BLBCJr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209319, "uuid": "208f6a21-130e-40d5-961b-ce7e35a33315", "value": 50476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209319, "uuid": "27acb280-9311-43bd-be87-6a4d5f185119", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc7bd1cb-4171-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777209324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209324, "uuid": "7f4c34c3-f044-4789-b886-3216b1fe72ed", "comment": "Malware payload (Mirai)", "value": "3b10b2f1eecac2f73e9c6f628978d2ed", "object_relation": "md5", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209324, "uuid": "429d41c1-8fa0-4247-b98b-00e1d87af78c", "comment": "Malware payload (Mirai)", "value": "92ddfee8a7b64140c18e476bda2c3064ae44a82856962d8fa678753e4cdbad74", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209324, "uuid": "38b2cd90-29b1-4802-8b92-ac0821455539", "value": "T1D5A328A3CC762F58C628D5B4B0B18F796B93AA6081475FBE1567C27480C3D8DF6063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209324, "uuid": "2a3e66fc-8c14-47e5-98de-fcf329653b34", "value": "1536:7NufPeqU2CVKCsNV7lsLPC9z+NzWuBx/3RhyXAL:YbU2RC4kPCtSzWu3/3L1L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209324, "uuid": "7613f2a5-07f4-4b5d-a3b8-43d7e5c45fc0", "value": 105056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209324, "uuid": "fd767521-ab89-4e02-ae17-df9d73aa9e97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcac73a1-4171-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777209325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209325, "uuid": "b0cdab0a-5e36-4c19-8f65-91b13291069e", "comment": "Malware payload (Mirai)", "value": "3780e9cb10765b18696d941e92252749", "object_relation": "md5", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209325, "uuid": "9de318a7-88e1-4516-8ddd-ee3fc095af94", "comment": "Malware payload (Mirai)", "value": "f972f06b4266baa3893341d36e430b37b069c8d01c0c551b883bdfb44d1b3405", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209325, "uuid": "547aaf24-9bc3-4802-9b3b-32a5d8e8c39e", "value": "T1A9B30945FC505B17C6C652BBFB4E428D7B2A1768D3FE720399256F30378B96A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209325, "uuid": "55d93d4b-b7c0-43f4-9a30-7d9a1255df83", "value": "1536:jUK9yqnU8vGRz4VA4j6T9y28Ty6O5FtZpqQcZlCtwywXvqcVuafhPeA45Zvk:QixnUHz4Z+5ypkn3E8k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209325, "uuid": "c5edd2b0-0d29-4cb7-a75b-b20db9f0a3a3", "value": 117280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209325, "uuid": "e58cb2b7-2d9d-47c5-a625-52e3bdef3c19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd0d54ff-4171-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777209325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209325, "uuid": "09661176-9efd-425e-9123-ad2a2bcd44e7", "comment": "Malware payload (Mirai)", "value": "0a15df5d380bf47811a64f12ce4cdc6a", "object_relation": "md5", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209325, "uuid": "77e223f0-27ba-487c-9284-addf029aa1f1", "comment": "Malware payload (Mirai)", "value": "52cb6742782f36629fc8c2cc58692b9f290a2339b670bf7b35b5794fb1183506", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209325, "uuid": "e146f25d-6b6d-4e7b-9a8f-ace95f6ead30", "value": "T11BB30945F8445B17C6C666B7FF8E438D7B2A1758E3EE720399256F30378B85A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209325, "uuid": "56a20e5e-650b-468b-8d27-f631fc781bdc", "value": "1536:p7jnPq8azP4V8YOTIBRvyNOzIuSIwYeFWd/lk68wywlQ3Ym3Tb/V1oEakCxH:lzPqF41OUBljSIxecUtCx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209325, "uuid": "5a6a6ad3-a566-4db4-ac61-178de6a305bb", "value": 113184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209325, "uuid": "daa46045-fdc1-4042-bcdb-1c1a039cea37", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd485b80-4171-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777209326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209326, "uuid": "3377eb97-237a-4786-a0e2-ad4300d805a8", "comment": "Malware payload (Mirai)", "value": "15ebadc0c04ec3fddc021e17494a3f35", "object_relation": "md5", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209326, "uuid": "009275cc-a40c-41bf-ba58-ff9198886d88", "comment": "Malware payload (Mirai)", "value": "4ed35d1aff577d32fec860d41171d16f234b991e46f42fd880d683eeca1f6cf7", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209326, "uuid": "fbc00b68-0f8f-434a-a079-673575a9a391", "value": "T1A9C32A05B30C0D47E1633EF43B3B27E193DFDA8121E4E640655FAA8A91B2D32558AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209326, "uuid": "e9dc063f-68ef-496d-8fc4-91c1d974ad0b", "value": "1536:6cB72AZ4ex10JrZqQ7UrZb6wI0vAnjiLVRuzae8Dhq6N2te5f3dBJ:6+B4exMF7oZKJnCNYaPJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209326, "uuid": "d816028a-6bcf-4118-a2aa-d93bf76eff15", "value": 121508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209326, "uuid": "7af2c378-7912-404c-bcc8-5aabf1193495", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd4bee17-4171-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777209326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209326, "uuid": "0890d6a9-d304-4253-b29f-3fde516e7962", "comment": "Malware payload (Mirai)", "value": "968b6f80c89551a930168f666bcedc21", "object_relation": "md5", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209326, "uuid": "723970be-bb36-492d-9507-d1e662969f15", "comment": "Malware payload (Mirai)", "value": "4a7e7c9e993b6f599d61304e0c2f17ed735b31661f926f5becd86811d02ed0b4", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209326, "uuid": "90b5caca-2324-47c5-abcf-b5dd0b0764a7", "value": "T1FE930749FD406B10D8D635FAFF4F024973934B6CE3FA7201AA245B2523CAA6B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209326, "uuid": "3e655e11-3bca-47f3-9b5b-f05fa8456ae2", "value": "1536:wqnZy8D4zgUdtS0tFbvacgzafVAweBuqKlUI9HiWNRIbT2gZ1Yvn:68NUv5nTacgzafVAwe4BNRIbT2gXc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209326, "uuid": "6a30de9f-0f83-4fa8-b0f1-850529e691a1", "value": 93252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209326, "uuid": "e79ff635-8dc5-48b4-8de7-650ebfc60c0c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe4ace36-4171-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777209327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209327, "uuid": "dc87af1a-3eec-4e70-9426-999da27f499a", "comment": "Malware payload (Mirai)", "value": "acb4a6c7c4ca98da70613f8e4a3b6325", "object_relation": "md5", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209327, "uuid": "eb7de2c2-e62b-467b-a42d-71145a52834e", "comment": "Malware payload (Mirai)", "value": "11bebb5b642c72dab008ee8ff3bfd7e58e6f3b8df5bc0e12fe66871a7295bfa4", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209327, "uuid": "21a3882f-4195-48e5-9c72-bff5624dab70", "value": "T14AC30956F8819B11D5D151BAFF0E124E77131B3CE2DE7312AD24AB307B8A8BB0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209327, "uuid": "3b9622fc-c7f3-4966-bb6e-88e9e118682c", "value": "3072:f2D7YhjFMX+maR8TcDeRqQV3tNQYciYTG1w:f2D76aX9aKTcRQVnoiYq1w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209327, "uuid": "91f57951-aad7-43dd-a6d5-d307a68b4011", "value": 129244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209327, "uuid": "e67e5fb8-6b08-476b-9ca1-e5a9eefcf602", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe5dc158-4171-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777209327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209327, "uuid": "3003ab62-c3d2-4ab5-b202-ce2b391638bd", "comment": "Malware payload (Mirai)", "value": "cb3d18fd54751159a4d6f611e4861c9a", "object_relation": "md5", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209327, "uuid": "3b1fe854-b57c-4139-8d77-645a834556d6", "comment": "Malware payload (Mirai)", "value": "5308a3b6b0cbb5d254545ebcd0d359ffb706f46246f962c579123451f27fbdc9", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209327, "uuid": "8493887d-b386-4c40-891d-03549360abd0", "value": "T163D3F8C7F900D9FAFC0AE7374853080AB230BBA545925A372257357FED7A1990477E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209327, "uuid": "7e9cb81b-f332-4a01-9bc6-17578a38dba1", "value": "3072:qNbul4MGHJLqHy5Fut5K/cwpifdDounVoQV1jbiGLD3rQ4J:HHy5ct8/cyiWuVosLDhJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209327, "uuid": "d1b12c6b-2a46-4aea-999b-d538208208a3", "value": 140064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209327, "uuid": "0178557b-e22e-469b-a4ae-0c12ddcfd3c4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe639242-4171-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777209328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209328, "uuid": "bc9300d4-8298-4756-b005-1c584e98dc79", "comment": "Malware payload (Mirai)", "value": "9f7c94b01a1a935c6aba650e8d478082", "object_relation": "md5", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209328, "uuid": "1d06c38b-3638-4fa4-a409-58f4cd995942", "comment": "Malware payload (Mirai)", "value": "a036ca45695a183e21e8bef03456768c73c19f4939b0d80ee3fff71f9b43513b", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209328, "uuid": "764b2471-7075-4053-ad96-af9147773a5c", "value": "T156C39DABB24F1051C82647F41BCB579C2E3325019E2B9AE77C6E373E1A369DE58063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209328, "uuid": "d0a09e2a-706b-4c9f-83d0-77c9291d365e", "value": "3072:wf0GQgHfg5nBR4YYSOxTKB6Aq7mgbgiCrheiiU4wqe:wf0tJBR4NSALD7rnCrheiPqe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209328, "uuid": "bcd03463-e3fd-489b-a774-2bb552ecd067", "value": 124344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209328, "uuid": "fee2fbf6-e5e6-47a7-9ef0-f5f907dcf2e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff08df13-4171-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777209329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209329, "uuid": "d122d3c6-f388-4978-ad45-b7b2c615e1b2", "comment": "Malware payload (Mirai)", "value": "2393a59d5b0408c1340290aab50dd6e7", "object_relation": "md5", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209329, "uuid": "87d2f557-9268-4afc-aba3-9dfe3913ee9c", "comment": "Malware payload (Mirai)", "value": "b44b8259c89f884d0300e2c698e8e0b4b03f27bd97577f3cbf162eca774cd452", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209329, "uuid": "075775e7-98aa-4903-9409-5b48e494cb1d", "value": "T1A9E3B71A9F910EFBDC6FDD3302A9060635CC954722A43B763674D528F64AA4F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209329, "uuid": "2ee3ef2d-36af-4d01-ab08-e6d98cdc249f", "value": "3072:6xjJw1Cc/0s6YAPwenUr48pzfR+Jonly:6xlw1xAop0YfRl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209329, "uuid": "0577768f-c936-4fa2-81b2-1ad2bd8a499d", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209329, "uuid": "9ca96a25-f9e7-4eda-b312-298977329a20", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff291558-4171-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777209329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209329, "uuid": "590e8061-8af0-4c28-8833-6ed351660e73", "comment": "Malware payload (Mirai)", "value": "2c203c83da934021c64a8d9daa6ca61f", "object_relation": "md5", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209329, "uuid": "61521685-e083-4a9a-9689-54f69eff20e9", "comment": "Malware payload (Mirai)", "value": "e06a22138113ff7d68651733bb4ad8da33cd45ed8d8b55c088c051923c16e57d", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209329, "uuid": "0f1e0a64-1750-4bfc-95af-c11a0d53230f", "value": "T17DE3885A6E228FAEF67C873147F74A20976D23D623E1D684D2ACC1141F6038E545FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209329, "uuid": "6855e66b-1582-4c84-afef-1b24e84b87a9", "value": "1536:p+vTcKot8sp2MKypYz8ZOfGQ+v3eB/hub8mXRCTUGk4onuftL4VxNdbK:p4lybKpzEOfGQ+vEubTt4ouftL4JdO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209329, "uuid": "7570f88d-9116-4a2b-8669-4afb412f730c", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209329, "uuid": "ee679981-182e-41ac-beb4-0d4268dca17b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "023e038e-4172-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777209334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209334, "uuid": "34c97520-b577-4d35-a3ce-b47bc960a97d", "comment": "Malware payload (Mirai)", "value": "c67b23e649b7554d236c5fa4fdc6548b", "object_relation": "md5", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209334, "uuid": "c0309517-d83e-4b64-895f-26819d0d74a8", "comment": "Malware payload (Mirai)", "value": "3a0bcb4b4749853aa2a4bbaaed52a1875511affc0cbfd058e90a0d08b64d0d80", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209334, "uuid": "0c50bbf5-4d4c-4267-a6e0-c661a83bda90", "value": "T14B14C70A3A228FEFF56D877147F34A30976976D627E29684E26CD5101F103CD681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209334, "uuid": "63404a03-4828-4127-8cc0-14ed592bcfcc", "value": "6144:4Z6eQCbeoufx4Jdf2dp06GtCqjYW8nY1j20WI:bely4Jdfap06GtCqjYW8nY1j20WI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209334, "uuid": "f9234cbc-9b96-4145-8aea-6898e2bcc882", "value": 202077, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209334, "uuid": "c29e0f95-592c-4af2-850f-e55af6ea4e81", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02cf8140-4172-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777209335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209335, "uuid": "73c162c8-a94e-498b-8320-361855b084f5", "comment": "Malware payload (Mirai)", "value": "ace185eec3a513f2b4ca10baddff21da", "object_relation": "md5", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209335, "uuid": "aab5f233-7812-4ad3-b72e-97e2cffb3af2", "comment": "Malware payload (Mirai)", "value": "b367c72294088527bc75269b3a1baa8ec19bf588513733dae6c149cecc35bb4c", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209335, "uuid": "e39c04e9-2dd3-4ce9-8e92-f7496e038978", "value": "T14AF33969BA0F6C41F2C2D3F9DA8C87E13E1735E3C6778DA1790252EDDBA39D949805", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209335, "uuid": "dc2249a7-b3e6-4c4f-b9f7-bb97206da6b6", "value": "1536:wdMiHrrc/qDHavM5Dtrg89RPA4b1X75rgmnX7Dy+IfMpgEn5p5M/LW:i7vDtrnPTR71gmX7Dy7fMpgxq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209335, "uuid": "36353a62-dacb-4f14-8897-1c49debcd076", "value": 157544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209335, "uuid": "3993cdb4-f2dc-4aa1-8a29-ec1ca00c01d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2da9dbf-4172-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777209684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209684, "uuid": "b279686e-a032-43cc-8459-5184eaeedc9d", "comment": "Malware payload (Gafgyt)", "value": "17d81b9bd49ce66ae7749a71ecc42961", "object_relation": "md5", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209684, "uuid": "fe155497-5c1e-4b42-9237-651b97c7406c", "comment": "Malware payload (Gafgyt)", "value": "464d59cf6960fd511104014644658d51366cec254665db3c3491422c9ddb5a56", "object_relation": "sha256", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209684, "uuid": "9844b3c8-ab5b-4248-a2d4-12624efb63a1", "value": "T1B99312245C6737BAE0C68C3811DB0FB9506A7C625A7BC306ED546E75A4B439A332EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209684, "uuid": "f5012de8-1ec0-4148-9c55-aad9e063e755", "value": "1536:3df8pfkj0ObczWI5KqbsGZtJpLu6oBN249+kt6U/9uFcZb1ILT00kf3VEst/SmAX:tf8dknbxI8qbpdu1Bp/90UZIXA583H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209684, "uuid": "bb27f4d0-2f5e-49fa-bdfe-e5795ffecb49", "value": 94272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209684, "uuid": "4544a598-b50d-4fbf-9e9c-8f1cee9d8898", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2e48dc8-4172-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777209684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209684, "uuid": "5224eedd-b615-49c5-8c39-43b5e77078fd", "comment": "Malware payload (Gafgyt)", "value": "7f328fde7445b6b65ac5388e5b9d9bbd", "object_relation": "md5", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209684, "uuid": "051049a7-18ba-459b-964a-5ad6c14418b8", "comment": "Malware payload (Gafgyt)", "value": "a479eccb04e74280989f6c59ec1fe3988a038d0b070a1bbeba9758df75f2914e", "object_relation": "sha256", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209684, "uuid": "3583acf7-471e-4307-b3ed-ed5380f006a1", "value": "T1DB442916BD419F06D4C622BAFB9E825533576BB8D3EF7002DD245F6523CA99F0E3A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209684, "uuid": "2066185a-ab31-4f3d-8227-43185a7111bf", "value": "6144:Vu4lZTfGelUs6kqESbvdnYcSffpggLmMwapUVPRFvVJO6k/yRfOiWA/D:NlZ7bUxZ1nMnpggiJapERFvVJ0/yOiWA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209684, "uuid": "f9727d3d-0db5-4e2a-bcab-a2e1c1db92b1", "value": 257080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209684, "uuid": "0ba9e2cb-539c-4313-908b-6a8608f7cbdd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2e621b8-4172-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777209684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209684, "uuid": "c8463053-9005-482b-a215-dc2d28609e43", "comment": "Malware payload (Gafgyt)", "value": "ac82c4156244b0928748a914d2536e6a", "object_relation": "md5", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209684, "uuid": "a05ce571-fab5-4b80-9467-3e928669e15c", "comment": "Malware payload (Gafgyt)", "value": "481b9c78612476a3f55e0983c4d9325376e3263deb3fddff6b050b5a8275bcdb", "object_relation": "sha256", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209684, "uuid": "daa0863b-359a-42c2-8aa8-8df393e3e8dd", "value": "T168543B83F900CE7EFC0B937649974915B130FB7608420A76A217BDAB9E3A1D61573F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209684, "uuid": "c910b111-6dcf-4257-96c5-06224d0b528e", "value": "6144:vQnhao3iSwGofdFVI7UrC3E2dzqasyySBMzVYzB0nsCLhQNZD:eafi31zHB+eZD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209684, "uuid": "55e45acd-eb34-48b8-b6b6-94ad6e74de36", "value": 280720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209684, "uuid": "ba7de7c7-2ce4-4d64-8e2a-e1e92ab6fdf8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2e74610-4172-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777209684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209684, "uuid": "0acb0564-a5b6-4fbe-93c6-04e3c4bce2ea", "comment": "Malware payload (Gafgyt)", "value": "f40781c9cb0aeda8cbb43fd16bb42498", "object_relation": "md5", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209684, "uuid": "080720bc-009e-4d9f-8fd8-cb20cd234471", "comment": "Malware payload (Gafgyt)", "value": "5bd97bf65e5c6c34efdb38f3ea2617370b663125e89979d93b581b7ed7c593dc", "object_relation": "sha256", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209684, "uuid": "2f4e14bd-5558-410c-bba0-85e7de9fbde6", "value": "T1D1A3121F69640F79CEB039F9A0B277AC682DD4DD4DE473DFEAA21BA411EB08100C57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209684, "uuid": "f8c53b92-52dd-4941-926c-bf75f616221a", "value": "3072:NzbqrIGlpY/u4QKIkHudZTvc2WCWNl9ggG6:NzbGlYvQWHStLID9ggG6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209684, "uuid": "29ea24ee-7396-485b-8ee6-48f9bb24b51c", "value": 104532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209684, "uuid": "2cb6b9bf-64a2-4f86-9f42-ade73a8b8f17", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2f31e4a-4172-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777209684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209684, "uuid": "05f3e358-ebe8-41bf-8051-3d1195264087", "comment": "Malware payload (Gafgyt)", "value": "de3f74a3afde33f90b9bd383e90d0598", "object_relation": "md5", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209684, "uuid": "0afce4c2-ba4e-4d19-a3da-76fcecfea9bd", "comment": "Malware payload (Gafgyt)", "value": "349a35c3f0c2c5e6482b142b53ee42b56edaf59810a473d8ba3869f4cdefbed9", "object_relation": "sha256", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209684, "uuid": "0be3ae88-843e-4cce-9055-02304b82a2c2", "value": "T1DD542916F9419B16D5C152BAFF9E825933173B78D2DF3102DD246FA4378A8AF0E3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209684, "uuid": "dbbfac44-fd97-47f1-9b24-e52af3969363", "value": "6144:90bw99FptCxmz9aSdMNqfXWw/sbaF8JzW0ib7GmxNV+1K:Yw97+x1NUXubaFEHib7GQNV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209684, "uuid": "a8df736d-20cd-4d1a-ae60-15a143fb6919", "value": 278924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209684, "uuid": "4aaa7258-f15c-4da4-a21e-f327502a3bcc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3be62fd-4172-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777209739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209739, "uuid": "95360c55-3c73-4cb6-aa96-398640265c6e", "comment": "Malware payload (Gafgyt)", "value": "50980b07a91e6ddf57e9cff26f12f9e6", "object_relation": "md5", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209739, "uuid": "715a36f5-2bc2-4d38-8c41-2f5f8d724bff", "comment": "Malware payload (Gafgyt)", "value": "0c5c70a2de859bc2f5e75372b70b71675f6da3c06e869b1a4ae947d9efdb7aef", "object_relation": "sha256", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209739, "uuid": "cbaac286-8aa3-4871-8301-61ce43f19716", "value": "T12793025F9F0CE566EA40ED39D9402AE7365793C17602EB79D52403AC8432E0FD2ADB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209739, "uuid": "c62044d5-e61a-465b-8a5b-12e03901146c", "value": "1536:9l85pMYfa6LUYzdp6ZkRDIj93kijDmI63zu1vd1tkVd1bonBhNL:kZh2aRDIj93ki5lDkVbsB3L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209739, "uuid": "69ba4adc-0924-4d87-9d2a-5423ac507638", "value": 92520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209739, "uuid": "f10124e4-cfe1-4131-b7bb-6e8ad56293fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3ce7d24-4172-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777209739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209739, "uuid": "3c84ee2d-b1ac-4a76-9033-b80dbb847d02", "comment": "Malware payload (Gafgyt)", "value": "88f446494ac50a5d12a1f82d98dcf5dd", "object_relation": "md5", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209739, "uuid": "204a5d48-a5e3-4aa9-b7cd-ebec1ca5d1c2", "comment": "Malware payload (Gafgyt)", "value": "09a437a57ee7b02d6ad061967d770a56dd92b7458167a578746bcb05571d9db9", "object_relation": "sha256", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209739, "uuid": "13c3485f-daf7-4f4b-b6c6-74218a81773d", "value": "T102442956BD419F17C5C262BBFB9E825837167B78C6EF3102D914AFA4338A49F0D3A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209739, "uuid": "c8320bf4-4811-429b-ae19-8a6e5c0fc095", "value": "6144:BxLk1xjF+CHInTaXzuSuI4JUKz5Ey7jj87rY:Bxconiz8I4JfFEKMrY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209739, "uuid": "cdc7d99c-fd76-497b-a1d2-88ad08f58e29", "value": 266272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209739, "uuid": "e64d008b-d3b3-4e2c-ab37-bf91c3894743", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3d2bfee-4172-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777209739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209739, "uuid": "2e96a236-3d3b-49d8-871d-c7959f683508", "comment": "Malware payload (Gafgyt)", "value": "f0d0ab41161006982830c530f3314b4b", "object_relation": "md5", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209739, "uuid": "94de4fad-dcde-4134-b706-b4e93357871a", "comment": "Malware payload (Gafgyt)", "value": "21f92590e7403745fcbeafde18424f589eea808771f8a6e6d35c9509be1a8a42", "object_relation": "sha256", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209739, "uuid": "08f6ae60-92ef-4651-83c8-3f18e83aba98", "value": "T124347BA3DD215F96C223A5F0B0F1CEB80F42B91589471EA9A5B7DAF54183EC9F1053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209739, "uuid": "02d2ca39-b8bc-4391-8f54-ca8cc4a1d4b0", "value": "3072:xCXr0tGfs0Ekqc5ve8AHGcrLQWzAoNQ6alUm9hzZbbWhbsHZWjkoxZTwCyJorj:QJEP8AHGcrLQhoO6alUm9hzFtEjkM7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209739, "uuid": "316643d3-4899-4e38-8257-e82322946df3", "value": 233968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209739, "uuid": "d295e0f5-10b2-4f2e-8b90-cdbbc9e627a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3d4a8a9-4172-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777209739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209739, "uuid": "9d428694-9e9d-4aba-946f-295fe7bc3d3a", "comment": "Malware payload (Gafgyt)", "value": "85cede4284367e5816e19774553fa18d", "object_relation": "md5", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209739, "uuid": "3274c50c-d259-46ce-88e7-62c1c830d269", "comment": "Malware payload (Gafgyt)", "value": "50cb2b1370a65b5295d6c7ab1f0dc12a4febcf0a55ab16609dd2febb6f58713f", "object_relation": "sha256", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209739, "uuid": "3afb78bd-fc9b-43e9-bed7-24c21cd0a55a", "value": "T12CA3121BE6545E69C97039FDF0B9375CA86C50DD9BF862DFEB624BA410DA08200C6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209739, "uuid": "1b3f1be2-8432-4161-bf2a-243cdc663a4b", "value": "3072:EzbqrIGlpY/u4QKIkHudZTvc2WCWDbqUVo+gTe:EzbGlYvQWHStLID+UVo+ye", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209739, "uuid": "b503286d-776b-4a62-9c17-9875a919f444", "value": 104476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209739, "uuid": "890cd8ff-e481-43d7-aca5-ac4130b42ba8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3d48c74-4172-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777209739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209739, "uuid": "f82fe733-3aa2-4d73-a005-7a243deb74d5", "comment": "Malware payload (Gafgyt)", "value": "c3c55561cc50df44ff4178b41518ddc5", "object_relation": "md5", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209739, "uuid": "3ce9b250-95da-4a8c-b9c0-85a701adebfa", "comment": "Malware payload (Gafgyt)", "value": "f6faf5e24fcf99b12d4c16d3435a5adf35e8af5c7f52db733afb40797289205a", "object_relation": "sha256", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209739, "uuid": "deb3265e-ac2f-4e77-a0cd-8d7c1a1b009b", "value": "T186443956BD419F17C5C262BBFB9E839837166B78C6EF3102D9246F60378A49F0D3A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209739, "uuid": "c1896295-eb93-485a-ad93-921b5d15fd38", "value": "6144:OiRvY4QpAmdZL2s1fNlwkLZm8OA4vGXH9gX0qjPMAeJ:OQIbfNlNXOA4e3mX3heJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777209739, "uuid": "73d527a9-e078-4e9c-b226-c65cb31d498f", "value": 267296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209739, "uuid": "7ebb1bc4-231b-4fda-bba4-3955241a1bc2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24b7d49d-417c-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1777213687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777213687, "uuid": "d97191dd-1daa-438a-8ab3-ea448c504ddd", "comment": "Malware payload (ConnectWise)", "value": "17b8207ad565ff236aa395a6e2f8e1d1", "object_relation": "md5", "Tag": [ { "name": "192-109-200-12", "colour": "#dac1a5", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777213687, "uuid": "e32e3ddb-e778-407c-b485-391149ec863e", "comment": "Malware payload (ConnectWise)", "value": "66796e1f3c863ee033bc02772a0304181cb295c551ba20eeb9d009d443db73a5", "object_relation": "sha256", "Tag": [ { "name": "192-109-200-12", "colour": "#dac1a5", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777213687, "uuid": "2fc5d0ff-fca1-450f-b3e4-6002cf80a257", "value": "T18D646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777213687, "uuid": "457d346a-a9b0-4855-afad-2d421a0e7075", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777213687, "uuid": "d189c9a3-54d7-4891-b5f5-abb87ea3ddb6", "value": "6144:KmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9n:51iw7gryNkSV1hy1Z1u2JLu9n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777213687, "uuid": "3fa114ec-532d-4779-9549-542b181a1944", "value": 312552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777213687, "uuid": "61978ecf-0e66-4541-8cf2-6eba4f5c33ec", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24bdd2e1-417c-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1777213687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777213687, "uuid": "388bb036-899a-403c-94c0-3e968e6a9e7f", "comment": "Malware payload (ConnectWise)", "value": "8a9b5db34aab2625f710d24082744100", "object_relation": "md5", "Tag": [ { "name": "192-109-200-131", "colour": "#2031b2", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777213687, "uuid": "79beb6e7-8e57-4cd9-aeaf-b8549fe4b052", "comment": "Malware payload (ConnectWise)", "value": "a8d7abaa6b9d95397ec1142e030392895382527ce1481450b7b3f13a7381b0dd", "object_relation": "sha256", "Tag": [ { "name": "192-109-200-131", "colour": "#2031b2", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777213687, "uuid": "dd8d6090-1305-46b3-80bd-5cdc5e18d6ae", "value": "T10A647C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777213687, "uuid": "a3f184ff-10a6-41f6-b01d-bdc12469b71c", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777213687, "uuid": "8a4ab85f-7bb5-4a15-a951-a7cd8ade1d31", "value": "6144:1mlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9N:A1iw7gryNkSV1hy1Z1u2JLu9N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777213687, "uuid": "fd6ed241-e082-4399-9d01-ef40b3b04514", "value": 312576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777213687, "uuid": "77309653-3598-4794-a548-c1295dfebf60", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d7af9c0-417d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777214292, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214292, "uuid": "b4499bb3-70dd-4d91-a31b-921125bafb43", "comment": "Malware payload", "value": "15a825700e3a512657a36a3cb270dc78", "object_relation": "md5", "Tag": [ { "name": "192-109-200-9", "colour": "#23acf3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214292, "uuid": "b0b67e7d-4216-43ac-980d-99ff9d4eee78", "comment": "Malware payload", "value": "2ffaa635caf56eba07b1049bab35e1eff7211c35b38a40f71029581b266924b4", "object_relation": "sha256", "Tag": [ { "name": "192-109-200-9", "colour": "#23acf3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214292, "uuid": "a794c0f4-8c05-4d58-80ed-cd52f692a34c", "value": "T1C9E6AD02B3F842A9E5BFC278C5625517EBB27C491720EBDF055495A92F33BD09E393", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214292, "uuid": "7c34f175-2c53-48e3-a945-f245e0b6f42f", "value": "70d2e884fa127843c5bcbb53da86b6c8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214292, "uuid": "a35031a1-11d2-416f-b37f-a14aad4fd9b8", "value": "196608:7dvIyQs3CY9eO8OwcPFGUe64IwzlxOxoBFDuUswlYQ+:7drz7whrrIA3OxojGt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777214292, "uuid": "927dc67f-da70-4178-a74a-008ed86fb3ab", "value": 15040367, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214292, "uuid": "9bf29475-6a0b-4d23-8baf-01d274919d05", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3bb8d03-417d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777214356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214356, "uuid": "383b604d-1be4-4b45-a682-0de7605c9d1c", "comment": "Malware payload", "value": "db21bf625aa48e2e055fcb8e2155ed0e", "object_relation": "md5", "Tag": [ { "name": "204-76-203-195", "colour": "#d42294", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214356, "uuid": "0ebd8dca-d0ba-4deb-ae92-3733437772ce", "comment": "Malware payload", "value": "dc6db551dd3022687349df55d196ab9611b53d6b90234aaebab356d149953c2e", "object_relation": "sha256", "Tag": [ { "name": "204-76-203-195", "colour": "#d42294", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214356, "uuid": "4b68d1f3-07f3-457c-8579-09e6b22df954", "value": "T1C62158CFE41111C58935EE0976BAEC4D6163C39466AA8FAF6CC81E3E84CFD12B051B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214356, "uuid": "173becbd-97bb-4c68-8f39-806f88ff34cf", "value": "24:WePRfRgdF527WnDWNIoZkgtvUlqguqgiugAMouKgY/WlHqhyKg2:WePRfRgdf27WnDsZ5G9ubi7AMouKgY/b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777214356, "uuid": "dc992801-6095-46f9-b7d0-fd00fdd562fa", "value": 1333, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214356, "uuid": "f440c4cf-669c-4f40-9af5-df59c13f174e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61b7ee41-417e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777214648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214648, "uuid": "16b1db70-fd77-4901-afc5-18649e57c796", "comment": "Malware payload (Mirai)", "value": "f1ecb3c68b123c9c29ede1f90c4c047c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214648, "uuid": "c671a874-a92d-4b20-adc3-349fa6db92f6", "comment": "Malware payload (Mirai)", "value": "81e941f34934d6a06d89b2aad020eb9c7aa135f4735d38e99742e3b86a336d29", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214648, "uuid": "8c07e434-e604-4be7-9054-c9e12632ff69", "value": "T1DDA3E849F9646B19C3E232FFFA49428F73171FE8B3EA70258E305BA033C5AA515395", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214648, "uuid": "57440114-268a-483c-8b70-a1daa0059034", "value": "3072:SxsW6X+UWUa3bzF9s6a9aaeSjxXW1N+fUn/3jPy:CBa39anQxXOnLPy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777214648, "uuid": "9dc3bf59-8526-45ed-9127-873cde568d16", "value": 102960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214648, "uuid": "6ad7516a-3bba-41c5-b84d-abe1f19ba4dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61b925e1-417e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777214648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214648, "uuid": "2b62be8c-09bf-4dd3-a5be-9e82c7ef63cd", "comment": "Malware payload (Mirai)", "value": "e8258a82cab0644790e9d313d77bf0c9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214648, "uuid": "aa4b9115-edd3-4159-a89e-4af870b89581", "comment": "Malware payload (Mirai)", "value": "daa40fc33eb3257ade9a439ae7ebadcd4b302ac1e16b560a4fc1257b9eea2c2d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214648, "uuid": "ba772c34-7b89-4913-b7ef-a6c2f4b0bde1", "value": "T1FFB3F949E9646B19C7E232FFFB8D428E33171FA8A3EA7025CD305B6133C5E9956391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214648, "uuid": "d869e0c4-0e0b-4e7a-94e6-6c6de9140579", "value": "3072:PVwjNW6X+UWUCIp05Wyu9acaCParBkMJtonzucPLD7cT36ruO:IlM2gcaCParBkMLolPLD7pruO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777214648, "uuid": "7e7c5169-6b9f-4590-9cf0-f8648597605a", "value": 116572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214648, "uuid": "a375f211-b9a7-4b56-b15f-a2553cfad5eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63b726f8-417e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777214651, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214651, "uuid": "174ac327-88f4-4d77-a67d-3709eec9058b", "comment": "Malware payload (Mirai)", "value": "51016a5c26be92b9854f8a966d69f737", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214651, "uuid": "9606ef20-4d72-4622-aeb1-c122baedff80", "comment": "Malware payload (Mirai)", "value": "497707c309049508e9bbcb11b67dfcb9f2801e1204c2d98c91f5c0079ddd9be4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214651, "uuid": "7d8ad12b-ad0c-4443-80fd-5c806f5ec87b", "value": "T148733A46AA41D677E10320F111A6CF521171FB3F2422E94FEBA47C72EB29281E7227", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214651, "uuid": "b7380d46-f9f8-44d5-923f-37e78209ff03", "value": "1536:/fJ+0WtS4ZRCOsylUqGF9rov+/AJvxuy9tpmin:/fJ+0WtS4ZRCt6UHF9EWMvxvpn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777214651, "uuid": "d330bf5f-3f48-490e-a04c-ba6b44283b99", "value": 73916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214651, "uuid": "fe17fb59-1983-4c37-a6d8-f45b7be4fce5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63c59805-417e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777214652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214652, "uuid": "dc52f23c-55db-48d7-a6ab-03f22cfddad3", "comment": "Malware payload (Gafgyt)", "value": "b3aeb314e3ea36888529cb4f39190099", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214652, "uuid": "3263d2c6-2e21-41c2-9c55-8ab2f331b2fb", "comment": "Malware payload (Gafgyt)", "value": "97036c6183ce1d478c28be61f3f7b86d23ebade9d1632fb4a5de2975a384ec34", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214652, "uuid": "4d7658fa-0c44-4358-8127-446bb821baa6", "value": "T12483F88AAA62EFB7C105B4B068BA6D79075E78525A5F0DD86438DAD0074F4CBB00F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214652, "uuid": "a403d7cf-df31-49f5-b80b-edeadce35713", "value": "1536:f/FIuxiZRgcYIidXSl1fKo9+cbBjsCIW3pPhk3K:f/FBXECo1jsIppk3K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777214652, "uuid": "a745c6cf-c5cc-4ae2-bbc2-56ba47647bea", "value": 86280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214652, "uuid": "bca17173-dd9a-4fe6-95fc-eae03ecdbb7e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63c591b3-417e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777214652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214652, "uuid": "d0a77f99-65c2-4acd-aa3d-aa2b07b482d1", "comment": "Malware payload (Mirai)", "value": "3430d28e594b4db854fd4282688bbcb1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214652, "uuid": "ec1fd7a3-5a75-4bef-b040-4acf76fc390d", "comment": "Malware payload (Mirai)", "value": "c308caa00f8eb0824b0def1ce58f5abf9072ff6e6db0d078718146e819f59563", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214652, "uuid": "4d1dbec2-16d4-44c1-9d62-a626d40a3f47", "value": "T113D3312ABB619FBBDC1ECD7306A94601108CA95A12D92F7FF6B0D518E38BC4E44D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214652, "uuid": "401a66ad-5ecd-4b44-9c34-d0ed9dd8edc4", "value": "1536:upUpwpUBAZOcFrMkBQrmWVohoAlJy7KrvIA95fXUG4NZdp92V3d:upUpwpUiPS6nIq5vA8V3d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777214652, "uuid": "a576e41f-fed5-4ff9-983e-ca1c8be6ec23", "value": 137912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214652, "uuid": "356b02ee-8f93-4ddd-a219-aca0acf5bbf6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "643a7e85-417e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777214652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214652, "uuid": "c1f75e1d-9e54-4d6a-b41f-b8ce7636bce8", "comment": "Malware payload (Mirai)", "value": "0360b3dff2d9c9581a81640db9f19a90", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214652, "uuid": "239f5cfb-664f-4165-bd7d-e1c245c4dfc3", "comment": "Malware payload (Mirai)", "value": "679bf650aef649684cfefd5324b1b1f83771b2fd41eb2761e4b395fc27f8f402", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214652, "uuid": "4b914660-4d01-42f2-b070-c1bdca4f2493", "value": "T17493C784FE59971AC3D272FBF74D02CD7B3A1FA9A7A6311699315E9033C4EA0653E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214652, "uuid": "11baed9a-eb4c-4ee6-bd0a-f7c147747ebc", "value": "1536:LQ/6en2XaG3vj+SigaogdHRZmUNZB/jsrleiR6Fj3n6+9f6U+Vuh7/BxIvbsJO9v:s/6e2L37+SigaogdHyUNgoiYNpV6s/UP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777214652, "uuid": "2ea8f59c-e110-4bda-b3db-49531bafe3a0", "value": 90728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214652, "uuid": "e95b545f-cbbe-430c-93d3-2964c3552c0c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a9bff5d-417e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777214663, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214663, "uuid": "70c6d226-e38e-4ed3-89d4-229904d4b2d8", "comment": "Malware payload (Mirai)", "value": "815aff00eb8937d56170eb9146553ec7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214663, "uuid": "50f8d3a1-2f24-4ede-9204-c67de01a3a11", "comment": "Malware payload (Mirai)", "value": "3a4aae20b8b08ceb8f074ebaa9946ea647ee2028172fb020e096073a0e697155", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214663, "uuid": "e2dcf386-e44f-4b52-bdd5-1d4da72a34cd", "value": "T1C3D333397E21BF6EE77C82300BF76A74D75626C636A19241E26CD7085FB025C188F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214663, "uuid": "e71cf589-43d3-4964-9d85-1a80ebb89bca", "value": "1536:xRjblr5t7K2aaCyXH0+Q3eu9uAufmA9E2RowXQ0dSb+DQJxT00YmZOcoi7RoDrHI:dr54mtWqLAV5cJCTDxGaNu3Di5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777214663, "uuid": "17980920-a364-44e6-b52c-69cdec810a3c", "value": 137928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214663, "uuid": "65911b53-6bc7-48be-9a86-8b2b28c1f412", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87a89f72-417e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777214712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214712, "uuid": "cdf83dfa-7421-49c4-8c0c-5a2b3e87ead6", "comment": "Malware payload (Mirai)", "value": "58bfe248cf6e787bfa8d967a02a509e1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214712, "uuid": "d02cc5f4-21b5-4f3a-9584-fff61ae6ca7a", "comment": "Malware payload (Mirai)", "value": "ccdd99bf2a205b516162f5b0866245cc7214b3a498018a32e15f22c8b858ac1c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214712, "uuid": "66e9204a-5c92-4963-aff6-feda717928dd", "value": "T17493E51B9B2C0F47C4EB8AF13E3727E4876DB96101E841C85917EEC507379B16612F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214712, "uuid": "d015283b-b823-46bd-8363-97f0ba32fdf5", "value": "1536:Drn+Zta344ctjvGejUrBQOQMRz1xgJoW040z3sX:ue344X+czDgtY3sX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777214712, "uuid": "089c5160-4470-4b2a-b8fa-88c80ed5d22c", "value": 91704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214712, "uuid": "b97f5155-883d-46ae-936d-169a0f5c2404", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "736ed358-418f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777221979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221979, "uuid": "96b4ae94-82a1-4534-a8c8-a0458d713779", "comment": "Malware payload (Mirai)", "value": "03e41702c34d1d6688cdc48a9b6c3346", "object_relation": "md5", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221979, "uuid": "3704cffb-24be-417d-b3df-f90b3f3208f8", "comment": "Malware payload (Mirai)", "value": "8d76e3c78b6cfa4c5aad31b96633f76b1277fe12210602663caecda72a768941", "object_relation": "sha256", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221979, "uuid": "4f453bbb-7451-42a0-847c-d692fb1f8f00", "value": "T120932B07B71D0F53C0DB5AF029EB2BF14766B9E112A36181B91BAED057336B82523F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221979, "uuid": "8ae28e24-3f52-4086-abe0-798751be366e", "value": "1536:v3HgV9X7apJv2pbwa9MCcrctdnUHBbWEIhN5hn3okO1jrFOeV6qDjaofSOe:vXS1apJv2l2bctdnFD5hn3b8jrFOeV6V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777221979, "uuid": "cf8d4390-d178-41c9-9eb6-854951db1c33", "value": 92910, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221979, "uuid": "b9a20492-83fc-4068-b711-5906b2faf664", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "737ebb78-418f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777221979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221979, "uuid": "701dda34-4d5c-464f-a153-f235e7658ced", "comment": "Malware payload (Mirai)", "value": "4ddec121927868831e9ce4068cc9653c", "object_relation": "md5", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221979, "uuid": "8598aa84-bc19-43eb-b8c6-583761c32071", "comment": "Malware payload (Mirai)", "value": "8ed8fb973288d51cb49c2ef5a3f6270705b22b164b2516bb67f9e8608c393e7e", "object_relation": "sha256", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221979, "uuid": "693a890a-c8e5-4cdb-b1cb-712b7765d483", "value": "T1B0C3D757FB11CEB7C84FCD7306AA4602108EA99746D97B6B77B4DA5CE70694B08E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221979, "uuid": "e92cf9f0-dc1f-475f-aa83-676b22c0aae1", "value": "3072:P+2uaXrIFfZZ5hnTSWQ7dwwBF9GhLRlge:G+rIZZZ5hnTSWQ7dwwBF9GhLRlge", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777221979, "uuid": "1d3aac83-96a4-4f9e-95c0-16dc597ce104", "value": 118413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221979, "uuid": "b7381653-c3b0-4aee-a639-f57c9b63a77e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73809767-418f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777221979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221979, "uuid": "acfa6b96-afaf-4d88-9a6b-b6b1ca858f10", "comment": "Malware payload (Mirai)", "value": "a0be236a7db7b9ff8f099f062a1752e5", "object_relation": "md5", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221979, "uuid": "3a8008fc-fdd2-48a8-8d4f-d80ee5d5f9e7", "comment": "Malware payload (Mirai)", "value": "0d8728e19d66bd67ca942b47bf2876ba30346f68960e1faf5d33b9ec03a2f4a4", "object_relation": "sha256", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221979, "uuid": "6eb608ba-3bb4-4876-8b29-9584d85611d5", "value": "T14941604B73CBB721EEE3E473759560202282C588D0ED5B4CF2D83ADDD0ADCA472699", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221979, "uuid": "dc9b0cfc-a3e0-4731-aa3f-2f0b0cb656d9", "value": "48:K8fgNeRbKzAHNl4tCZQLc5qYTERBY1D1A1V1a1huBaX1mTwFqOYg3fvYNI:K8fgNeRuzAHNl4tCZQLc5qYTERS1D1Aq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777221979, "uuid": "c5ff222f-bd41-4adc-820d-e3eb405306ea", "value": 1996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221979, "uuid": "7a31da28-bfa5-47fa-8a0f-57e6cb521e3d", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7385225b-418f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777221979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221979, "uuid": "c37d2b74-6330-4699-8e36-767f0be573b2", "comment": "Malware payload (Gafgyt)", "value": "1370f9c18e0c2533cb088a808c3dac9a", "object_relation": "md5", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221979, "uuid": "acbb88e6-3ae2-444d-adc3-1a5546cc258b", "comment": "Malware payload (Gafgyt)", "value": "97cc6337807dcaaf5f1225855cde9f54c946e6189e33f33a72c1625fdd2f002e", "object_relation": "sha256", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221979, "uuid": "3f51a66a-7f24-4361-97f1-da89f7a0d70e", "value": "T10C932B06F8008753C1D327BABB8F47493B3566B957DF33126A346FB42BC27991D26A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221979, "uuid": "779f0ce1-be9d-4e62-81b6-537ca21288ef", "value": "1536:32HkBurAzlqXnP3ERWM45so5eRNOa85hnjfY9Of3ETTW+gWjvDqQEqn/kJXuXe:gczaEUuo5eO5hnU9OPEPfjvDqQEqnsJr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777221979, "uuid": "2b4c23f6-e1b6-4689-a529-543954d622be", "value": 97382, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221979, "uuid": "40a6bf6e-ab79-408a-a64d-13fdc5f4cb01", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73863496-418f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777221979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221979, "uuid": "20815e65-0e7a-4573-845a-73d14b92c227", "comment": "Malware payload (Mirai)", "value": "93d2df52787681b8b515ed704d8b4b09", "object_relation": "md5", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221979, "uuid": "685ba67b-db26-41ec-af42-217bbb6a412c", "comment": "Malware payload (Mirai)", "value": "2cd252a8a70cee02cd28f5eec2ebde32038ccae39769404c3b03fa50514adfb4", "object_relation": "sha256", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221979, "uuid": "d5ce987d-2902-43b2-b56a-33aa65de7f32", "value": "T1B9B3C9667D21AFEFE168C2300BF7AF2196D422D627915382F26CE7581E7124D1C5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221979, "uuid": "fe982756-a516-44e0-8c29-c92d280fd66c", "value": "3072:GPySnMPulabA+5hnXKySW17dwwBF9GhLRlge:6ySMGwX5hnXf7dwwBF9GhLRlge", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777221979, "uuid": "dac4aee9-1d8d-4401-ae55-3d2dcee55ccb", "value": 117805, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221979, "uuid": "63ed2868-b544-4583-95c2-4fb6803c1cab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73890cf9-418f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777221979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221979, "uuid": "af1bca51-0651-4864-80ad-42684bfa1064", "comment": "Malware payload (Mirai)", "value": "94fea368be9cf327ade675abce96a3eb", "object_relation": "md5", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221979, "uuid": "6f8754be-4b40-47f2-bf89-8e54c2ef7ecc", "comment": "Malware payload (Mirai)", "value": "935501d6b8d6f65c27ee5e6c8a5bdf47d8b13489637958a4a9f05a56b066db8f", "object_relation": "sha256", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221979, "uuid": "a596a8d2-17a9-4e5d-a274-23da6c9f3afd", "value": "T122A32B37BB130A23C0CA547211E30731BBB5D3D928FA5247B9916DEC6F2A6843526F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221979, "uuid": "3a0209b0-fe0a-40a1-bec1-54326c7c0426", "value": "1536:83HBfYW1nNM5pwt2tIJphaA/oeyZXJZGL/zOeF6OXj5ufepje:ELnN8VqphaA/ohZg/zOeF6OXFufcje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777221979, "uuid": "94ac5e43-efd1-4f43-bb82-5ce6109e3488", "value": 103232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221979, "uuid": "75d1fdb5-8538-41e7-9410-ab1621972751", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "738e3d72-418f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777221980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221980, "uuid": "d098f040-1d33-45e4-abec-681539ecbd76", "comment": "Malware payload (Mirai)", "value": "42ea0275b067ddfd18ec9178fb84a186", "object_relation": "md5", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221980, "uuid": "b2f5ef73-bc8e-4b27-b300-d3577238cfd4", "comment": "Malware payload (Mirai)", "value": "e55b07ec5f9a7c467622234b424f97f095894869d50a5727b61e68e4377e0cb4", "object_relation": "sha256", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221980, "uuid": "f932a47e-0288-4d16-a4f7-46b62a51ab4f", "value": "T169C33B06F5018B53C1C3177AB69F561A37232BF997DB33125A246FB42BC279E0E39A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221980, "uuid": "c6cab345-4b4e-4378-986f-e9a8fe56bb56", "value": "3072:HMdhrJakugmtQiWWPBXA5hnOLSGLR1Z2mynQUJ1nXI7n:HghrJakugmFXA5hnOLSGUmynQUJ1XI7n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777221980, "uuid": "dde5a573-4538-4708-98a9-4c1ba287137a", "value": 119190, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221980, "uuid": "292260d3-ba02-4731-8b84-a5a19c478369", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73a61961-418f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777221980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221980, "uuid": "d28621be-695f-4c71-b09b-d14a20403536", "comment": "Malware payload (Gafgyt)", "value": "9bcdc99594e68efd3f84e516cb70b7b8", "object_relation": "md5", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221980, "uuid": "35c0fc54-9c5e-49bb-916f-766aa442f4c7", "comment": "Malware payload (Gafgyt)", "value": "e0a726420a69d4f0fdfe403fa43e381e1d31a945ddabef2e33b690c91c8bf9fa", "object_relation": "sha256", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221980, "uuid": "81036a09-5472-493e-b938-48e67fd9163e", "value": "T133E33B06F6408B53C4D22776B6CF520633239BB5A3DB33065924ABF43FC27AA4E369", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221980, "uuid": "7272e17a-62a6-4b51-8a0c-4134cc9d1090", "value": "3072:IdHnVYz6raaaTI0+pDSOuOsMrZ5hn+nX+CHNoM/9j5HRmvwTsLOQtyn:UH6GraaaTILpVsMl5hn+X+CHCM/9j/me", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777221980, "uuid": "3862610b-2619-4925-bec9-72ae99207f0c", "value": 157103, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221980, "uuid": "a8771a7a-c14d-415b-a4b7-b47aefc72f1b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96880f7c-418f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777222038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222038, "uuid": "cf5f967a-e631-40e6-89e8-ec299d471025", "comment": "Malware payload (Gafgyt)", "value": "87b5bdf7786f6d004c2e430ff5b692e5", "object_relation": "md5", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222038, "uuid": "24b3d4ab-544f-4494-afae-85f1559138a0", "comment": "Malware payload (Gafgyt)", "value": "8d6395d47d016ca7f896326f8c9e250791b3748780718d53f8c51452ecaf98bb", "object_relation": "sha256", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777222038, "uuid": "25f8e436-8fa5-4b71-bc4f-4ad5581c1689", "value": "T1CEA31B05F9018757C1C327BAF79F474D3B3266B557DB33026A347EB02BC27991A2AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777222038, "uuid": "c0e2ed04-e1c2-4055-b92e-0ef730de5910", "value": "1536:2MYkb4sqkx0y7Q5K1Rj4tOSJv65hnKjOErjzTs2obqj0srQ0KnW64Xc7e:BlqhIjY65hnKjOGPoej0srQ0KnR4Xc7e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777222038, "uuid": "8dd4b92a-8641-4ed5-b318-f614123fe686", "value": 104096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777222038, "uuid": "42ba90e4-a691-413c-a43f-cf8191c70971", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9688f279-418f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777222038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222038, "uuid": "f2150acb-730f-49c8-9204-a6f2ec2a0bff", "comment": "Malware payload (Mirai)", "value": "6dcea1b0b40542a843404ba25cc91ae5", "object_relation": "md5", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222038, "uuid": "c83e6b0c-04f1-4372-84eb-c40b2a9be592", "comment": "Malware payload (Mirai)", "value": "d8682575a15c817007bcdd5df0dcb7efa58f76b60b40ae55eecf4b93da7de0a9", "object_relation": "sha256", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777222038, "uuid": "d2716326-eb48-4346-a5a5-dda193979322", "value": "T144935C23A61BC6BAC0A346F917DB6A229D23BCBD1B23711673D4BCF42F168D51D19B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777222038, "uuid": "98e114e6-c17d-43ed-a69e-91366bad46b6", "value": "1536:V7K6pnUiMu/M2o4AkFI/V7r5SVpGfQBO3zphaQWZ/Q9TSYmg6IDum2Xj5YZb0e:FweJjI/JiAfQByzphavZ/QJIg9Dum2Xe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777222038, "uuid": "15ee8c32-956c-411c-9519-b404ace63ea0", "value": 94508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777222038, "uuid": "9ae66633-b857-4d52-9da9-30c880fa22f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc45891b-418f-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1777222209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222209, "uuid": "f40d3798-4d1b-45de-953d-768ef588ea27", "comment": "Malware payload (ConnectWise)", "value": "5a9d52560da14c1b184393d4d3ba38f7", "object_relation": "md5", "Tag": [ { "name": "124-198-132-37", "colour": "#12f62e", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222209, "uuid": "daf65c5e-cb54-474c-828b-9598a5323556", "comment": "Malware payload (ConnectWise)", "value": "b4a04f404b21eaf36cff896dee702cd54fe70fdf207860958482c9198a9c3ece", "object_relation": "sha256", "Tag": [ { "name": "124-198-132-37", "colour": "#12f62e", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777222209, "uuid": "a65b0a02-3f7c-4c30-9712-b622d94a5e2b", "value": "T121647C11B9C48432C273383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777222209, "uuid": "758121bc-eb80-4de4-a68a-e84394fa9a7c", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777222209, "uuid": "0b6adb26-2e0a-40f7-8398-8397d67a6ef9", "value": "6144:KmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:51iw7gryNkSV1hy1Z1u2JLu9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777222209, "uuid": "9754ab6c-2cc6-40ce-afc4-c59bd42ba311", "value": 312552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777222209, "uuid": "9c7f55ef-f14d-41c6-b54a-c868194b9ee6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef61efd1-4191-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777223046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777223046, "uuid": "432dd82e-f8f5-42d2-8387-235e81f6454d", "comment": "Malware payload", "value": "2ce94901e601a86961e530bdc1466f45", "object_relation": "md5", "Tag": [ { "name": "pw-6654", "colour": "#44e540", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777223046, "uuid": "1ea2e2cd-e85c-4108-99a1-20dffbf9ae61", "comment": "Malware payload", "value": "96e1237b16aa9bc94aee2cb602678b90337fc25320e1ba7b7fc79afdfb43b638", "object_relation": "sha256", "Tag": [ { "name": "pw-6654", "colour": "#44e540", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777223046, "uuid": "7f796e4b-fa6d-4317-aca9-fa4c6140899a", "value": "T19EE633526258F355D14792BAC4CF5BFCAFBF5A2BE629B026154302F48FE471B68B70", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777223046, "uuid": "d55db978-03f6-4d34-a7af-0f3669c45a9f", "value": "393216:IFovFyr3yFibv8R2NZkMMTvL9JiUckuYblPo:IFovFyDvbv/SMMTShYJo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777223046, "uuid": "b32130de-1e2b-40e0-b6f4-3f22fff2ac18", "value": 14800766, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777223046, "uuid": "d5c8f20a-06d5-455c-916c-589e775896ea", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6304ec00-4193-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777223670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777223670, "uuid": "c68a0c73-5960-46f9-a935-0d0f0f78fe32", "comment": "Malware payload", "value": "4b2b24acde09ba9711dc6c5670669efd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777223670, "uuid": "e0c3d446-e3fb-4ca6-842d-9b9b1555be6e", "comment": "Malware payload", "value": "a5411ce5e644390886b6f5e20e440c8a44a269fb699fde792519890f8ed1c682", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777223670, "uuid": "abc50c1b-841b-425a-9bcf-dd3646c4dc76", "value": "T1BA93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777223670, "uuid": "10042b32-fcbf-428e-ac1d-df4a1eb7985d", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPX/IH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777223670, "uuid": "bc9532f2-8adc-42a6-b830-e1a6010e8fff", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777223670, "uuid": "77d6981d-9e9f-4eb2-b77b-6cef3362a3b3", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c7c31a0-4194-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1777224008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777224008, "uuid": "40e799c8-51ad-4073-b0f3-53fb6985f248", "comment": "Malware payload (ConnectWise)", "value": "613b9913c9f52dcdb9ab27ca8a00019e", "object_relation": "md5", "Tag": [ { "name": "203-159-90-22", "colour": "#3626af", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777224008, "uuid": "daf0eb29-eef3-442b-afe6-bc69a5aba0ab", "comment": "Malware payload (ConnectWise)", "value": "643f274d35e21b931a9eba16a248446bc7861d82f5be550e42bac039ba666061", "object_relation": "sha256", "Tag": [ { "name": "203-159-90-22", "colour": "#3626af", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777224008, "uuid": "2f6ae786-030e-4b76-9a0c-8fc6cb254c96", "value": "T1FC646C11B9C48432C673383107B8E2B28DBDB8301D655B9F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777224008, "uuid": "08166b1b-e3fe-4d71-a648-5f36465e8a8c", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777224008, "uuid": "c6455660-a530-4d73-8880-c1cd93b4a56a", "value": "6144:lmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFti98:Q1iw7gryNkSV1hy1Z1u2JLI9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777224008, "uuid": "d58d835c-fd7b-4841-8137-0babe93e73f7", "value": 312560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777224008, "uuid": "16acaba1-1ad9-462f-86b5-7f0be2b27713", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "647c9a2a-4197-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777225390, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777225390, "uuid": "75577cdd-51e1-48e8-9b73-ed4df7d9567a", "comment": "Malware payload", "value": "a0032e8b27daa2ff76f2abd093c74438", "object_relation": "md5", "Tag": [ { "name": "pw-4496", "colour": "#08aef6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777225390, "uuid": "7b05e6e2-4f5b-4d14-a887-dd628223e485", "comment": "Malware payload", "value": "cd5c1a97fbadbb3c2352084f5cd8f91e5bcc1f08e62ca845cc79129d9d752970", "object_relation": "sha256", "Tag": [ { "name": "pw-4496", "colour": "#08aef6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777225390, "uuid": "c87f6af0-ac88-406e-a262-2462bf71af5a", "value": "T1C9E633FE1430E6EBEB970061B3574EF312D2655774B48A09A9971A66C7A0F03F4F92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777225390, "uuid": "6a6ac9ab-ac46-4061-b88b-8021b8aee81c", "value": "393216:EsRZnBvgsYOiCJhqDZDipLRKjxeWruSYiBK:EsRZnNjYg3cN4r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777225390, "uuid": "d7ca0ed6-3312-4749-be77-6d9013f9f148", "value": 14960830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777225390, "uuid": "66b38d26-08d7-40af-ada3-2e95fd3ea73c", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "973db8e4-419b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777227193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227193, "uuid": "25708a51-e8d4-45d1-ad01-7942e77e56a0", "comment": "Malware payload", "value": "30c79893c19e1d585e72c1793b19af9d", "object_relation": "md5", "Tag": [ { "name": "adeladel32951", "colour": "#86ce0f", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227193, "uuid": "9042639b-5fcc-4b30-af35-f5232361eeca", "comment": "Malware payload", "value": "e3f894ca1868d4dd9c8a0cf03bd00bb4268359b05feaabac640f753f7ef980ba", "object_relation": "sha256", "Tag": [ { "name": "adeladel32951", "colour": "#86ce0f", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227193, "uuid": "8077f74f-464d-4337-a208-a2b39d70ad5a", "value": "T13155E242A2C6FD1BD3362E358594E32D89247F31EEA6930B30BD35AC543BBAD85493", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227193, "uuid": "42cad1b4-4955-4eb3-bc9f-32721d432e97", "value": "24576:ltsCDb36T6hRRCCXUJWpQ+NGkIAm13QuQQe:ajkIAm1Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777227193, "uuid": "e5514436-e0fa-4782-bab2-6c4f3e23ce53", "value": 1309448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227193, "uuid": "8236f962-565a-405c-adad-0518467d8eb8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97d7f212-419b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777227194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227194, "uuid": "fbe77e02-2045-4c01-beee-3ac57beed6f0", "comment": "Malware payload", "value": "7d5ee7fa5512098d53e4510f0f6c8fb7", "object_relation": "md5", "Tag": [ { "name": "EvelynStealer", "colour": "#88ebcf", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227194, "uuid": "dfe9e3ce-39d2-46d7-91e7-ca83af5ebc80", "comment": "Malware payload", "value": "798053876c6129c9e0d16548b0266cddf49dbd06e8a949afa3e8129431e0a9ee", "object_relation": "sha256", "Tag": [ { "name": "EvelynStealer", "colour": "#88ebcf", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227194, "uuid": "40788dcc-61a4-45bb-8de9-b18a2fefec98", "value": "T17505DFD679887C4DFEE45178D0AFC3A323BDEFB49DA387439228A5321D579C129913", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227194, "uuid": "03fefcb9-1bd7-47b4-933f-0c6f5e954f18", "value": "af7570de216f318e0305ac721830d4c4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227194, "uuid": "1426810a-7521-4e2e-b54e-24233358b899", "value": "24576:3YbSu7+OXQe2BvUF+/s5S0Y+IkBA+Op5O8S:SUOAJB8F+/5Vdk2np5O8S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777227194, "uuid": "c4bf2041-613c-4844-b38d-aa9096457427", "value": 837571, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227194, "uuid": "623e5565-41c2-4cc4-8dd1-c6dbb3e14dd6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97fb299c-419b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777227195, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227195, "uuid": "d8fcb6de-6893-43b5-95dd-f76aeca614d5", "comment": "Malware payload", "value": "a8204a6ad3a7990c7441f7b339f21c2c", "object_relation": "md5", "Tag": [ { "name": "adeladel32951", "colour": "#86ce0f", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227195, "uuid": "426eb714-1c1c-4108-a5c7-55b44483fcf5", "comment": "Malware payload", "value": "6005bc3431fadc59f29bc0e367d3a67359e43708f270ffca5b5725d3b44c2446", "object_relation": "sha256", "Tag": [ { "name": "adeladel32951", "colour": "#86ce0f", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227195, "uuid": "f442f9fc-0aa2-473d-bcac-80fa48f4d3c4", "value": "T17E850255B7A400F8C077D079C956B60BEA75388907609AEF17E489697FA33E06F3E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227195, "uuid": "7c580d9e-a9d1-4eb9-9408-4801ec7d0b67", "value": "12dad28843bf7094e6d58be7a79bb0c9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227195, "uuid": "18b033c0-9fa5-42a3-8e5d-36c3583f278c", "value": "49152:H9Lm8EeZqeanoW3Qfw/yOHT3W1h/bXAf:d2zQI/yAT3W1hTX6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777227195, "uuid": "9b9d113d-3990-42a0-bbf5-e89d3967d041", "value": 1865216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227195, "uuid": "55e7257f-a451-4269-a7a9-e09aae87f88a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "982fd8e6-419b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777227195, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227195, "uuid": "fe0d595e-ec3e-4346-b518-851ddeaa5450", "comment": "Malware payload", "value": "bdccf804ba3c10fe824189853c221531", "object_relation": "md5", "Tag": [ { "name": "EvelynStealer", "colour": "#88ebcf", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227195, "uuid": "3d1855a3-ab25-492a-85df-0d4685a773ea", "comment": "Malware payload", "value": "dcb8ecbc2bc73f2b46723146e598eb710a573e1e74a96a2e07d44af320862faf", "object_relation": "sha256", "Tag": [ { "name": "EvelynStealer", "colour": "#88ebcf", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227195, "uuid": "7d0e1a35-eaf6-4b79-8a1b-b6905ad03c81", "value": "T1AE7302B3E4B9D898C17A61F519C02A74B37861333EF3522B1691663C8F3A8582704A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227195, "uuid": "22c2d3a7-4a4b-4c91-a6d5-b2ae0207f397", "value": "c73b062616a5cb86de24f970f653f4e9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227195, "uuid": "258b1f2c-ce6f-4b22-a9b0-d274d9ab073d", "value": "1536:CUxK32Hg2rqMxegZvl6+Wrgl1Y6RMe/TRnOW6DuiWlU4yGQW:1xQ8Jxegn6PglpRzQW6il24B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777227195, "uuid": "01f54eeb-f7c4-4252-b127-0c89dbc269c0", "value": 76800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227195, "uuid": "dab62789-eeed-47f8-8a00-2f6cebaa3eba", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98d2772f-419b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777227196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227196, "uuid": "0721a0da-22a2-4590-bc98-45aa21824561", "comment": "Malware payload", "value": "2c2f2c3a89f3f99f039b4ea03c4fb519", "object_relation": "md5", "Tag": [ { "name": "adeladel32951", "colour": "#86ce0f", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227196, "uuid": "a34983f8-c7a3-4034-9e5b-df6e4b1da2c3", "comment": "Malware payload", "value": "ccb3513f16ba27669b0ea1efc9a9ab80181e526353305cb330a6316e9651ce98", "object_relation": "sha256", "Tag": [ { "name": "adeladel32951", "colour": "#86ce0f", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227196, "uuid": "907c2d24-dc9b-4678-bc32-2b9a0d531ffd", "value": "T1F8961206B28AFD47D7322C345945E32D8A627E34EEE5930B31BC79AC453B76D8848B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227196, "uuid": "3cd5032d-67f4-49cc-9792-0d394c723af4", "value": "196608:BFU5JffPNSfxfuNqXaqtkSIVWH+lY1iP9a5NcINgqK2rICJs:3IPNSfMGPkSEoOY139nHts", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777227196, "uuid": "0db73b30-4e7a-42b2-a750-2d2e3b92507b", "value": 8670472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227196, "uuid": "6cf93bde-03d9-4e60-af78-301b2cebda13", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33f47503-419c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777227456, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227456, "uuid": "58c160f3-d3c6-428b-91c6-6d376ba59715", "comment": "Malware payload", "value": "067e04de2769facf686270b9346601db", "object_relation": "md5", "Tag": [ { "name": "pw-9912", "colour": "#fcd0f6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227456, "uuid": "4d4aea6f-785a-4291-a892-b00fea229178", "comment": "Malware payload", "value": "2d5dcca8808e4caa357624728cbcd7f106003003baea882765cc6beaaec49736", "object_relation": "sha256", "Tag": [ { "name": "pw-9912", "colour": "#fcd0f6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227456, "uuid": "f57dbe3b-eb87-43e8-92c9-9b85e391598c", "value": "T1EDE63328CADC8B89F3E1FADFE95290CC088D26ECFF556106DE468303794C67E9095E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227456, "uuid": "deb62311-30c0-4c03-a51a-aada795144b7", "value": "393216:nZIasBRWFiMvb26yog0q/tuGHl2qvfPJraYff9htobVQ:2a5bLyogH02rvpeY39htQVQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777227456, "uuid": "9cc2e3dd-af31-46a6-8196-a8ab3c975a30", "value": 14808030, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227456, "uuid": "528922e6-aab3-4b2c-a6fd-9d75a17cbec6", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "489a4e33-419e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777228350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777228350, "uuid": "6852a62e-aaed-41be-8d41-3484c9a8c92a", "comment": "Malware payload", "value": "89500e1ad105ed365547113c8051be7e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777228350, "uuid": "9637e9c2-8999-4dc9-855f-72fc471973c0", "comment": "Malware payload", "value": "92699b2f21bcbdc146f5faf4fd9c1e1f92c268370a55ffa7610efebf7f5cb7e0", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777228350, "uuid": "a9833178-82ad-4217-99e8-1751434daccb", "value": "T18E32A00E67A55355D92FD70A732A678E4FA58363DF08DB9F93DA123105D2F0358D02", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777228350, "uuid": "8bf29d8b-2062-49bc-b08f-b1f24cc4cdd5", "value": "192:TR7ez6TVlpa15rtwHEdyLnNnqdkBVNj+A9dw2efPMObAN4QTgpTBz8+YjhdVfVAf:TwyVlqrty1LnNn2GY2IEObANwp9gZnzS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777228350, "uuid": "716f3757-f4e7-4eea-97a5-13070a8a0650", "value": 11520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777228350, "uuid": "b84581d5-1efd-447b-801d-d663c7dbf1a1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e16eff5-419f-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1777228815, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777228815, "uuid": "264c54f0-ece2-4de7-b5d0-1a007c93b9d2", "comment": "Malware payload (ConnectWise)", "value": "1031296ce6d657d75164a816f879d299", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777228815, "uuid": "40b53894-554f-4b12-899d-b6b4569b376b", "comment": "Malware payload (ConnectWise)", "value": "e9984727ba3e5304a53342ada9212648ef539fdd8e9a50d07c898ad5fa7aa045", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777228815, "uuid": "9eb63920-28d1-4bae-b3b7-ed3744b5a2af", "value": "T158A623216BF88174F1FB2A78E97D80B14A36BC648A26C05F0774395E28B0F54D6B67", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777228815, "uuid": "7886a8ee-1256-4540-89a5-907053d5f2d5", "value": "196608:GnCtVYqI5MvbWEpKkqHIJqKxnCtVYqI5MvbWEpKkqdnCtVYqI5MvbWEpKkqWnCtO:qCXvI5MvHxrJvCXvI5MvHx6CXvI5MvHS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777228815, "uuid": "e583457e-e695-42e7-94b7-d8d0650f3379", "value": 10190848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777228815, "uuid": "b61ff582-af54-4790-84a4-d567a1b603a1", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a5f79f6-41a2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777230178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777230178, "uuid": "6bc62658-51a4-4de8-9fc4-8ad5f1a8d4a0", "comment": "Malware payload", "value": "ecf18a248ad570a5a2a19cabfb4ea667", "object_relation": "md5", "Tag": [ { "name": "pw-8814", "colour": "#937253", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777230178, "uuid": "f2d0fdcd-b96c-4eae-bd01-4e8160c6fe3e", "comment": "Malware payload", "value": "9c661802aba026f79ce992a417e424088027283ba20d11cc2a088d375d3fecba", "object_relation": "sha256", "Tag": [ { "name": "pw-8814", "colour": "#937253", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777230178, "uuid": "82b17ad9-d517-44fd-afe2-a4260e8554bd", "value": "T1C8E633208ABBA03FC247D8F129C6F0165CDF3E10E29EF119A4BB89F075B687D51574", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777230178, "uuid": "555b27e7-4ae3-4c0d-9f6e-8d84c6fc0664", "value": "196608:SjNszbOTbVrHinAvAzxvgIg/kKTNBnLGOIgvHIkeU35tsZc8ydEH3l6yRRG14SeT:Y8c0nAYpgISTNBxvLeU35B8ydA6Icxw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777230178, "uuid": "c819d507-c22c-4d20-a84c-432918dfba3e", "value": 15189630, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777230178, "uuid": "846f3f43-515c-4b60-b0da-596c5a7c5355", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3466bfd8-41a6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777231752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231752, "uuid": "9be7a8a2-714c-4d32-8c8d-196b6a15a997", "comment": "Malware payload (Mirai)", "value": "e25fc6a2fbe4158aad17b79a83f56e97", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231752, "uuid": "9e8aacbe-af1d-4152-bbef-88cc8fd00891", "comment": "Malware payload (Mirai)", "value": "1b03db850754bc1c3bb1d11cd8e79d304b35866ba5638f7a013723e34c89ac77", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231752, "uuid": "aa7776e4-6c84-4f34-b96c-6bbbbd1ae943", "value": "T1A5C3065BFB0D0783D89759F02D3B3BF18B5DAAE011E452C56629EAC147368F22121F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231752, "uuid": "952d10e3-513a-4945-8ee8-5662fcdea7c3", "value": "1536:itb0nSZ/lScYm6L7GIxmgfUSGMAcdYRpdL/egw1OCq3GHuo7InXQtNpUiYGZfWa:5Se5HK0USGMAcyRTmoouomQqcOa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777231752, "uuid": "328c8363-3a1f-4516-9898-56d23aadae78", "value": 124052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231752, "uuid": "269c333c-ec54-472b-93dc-a9d9a07876de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5844a9ca-41a6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777231812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231812, "uuid": "a41de3b2-5923-40ef-9a80-c4223f7ffc7c", "comment": "Malware payload (Mirai)", "value": "a23c953da60a5339f95009c5cb8eacd4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231812, "uuid": "cb9e0b1e-350e-4fc2-94c8-51a10cc5af20", "comment": "Malware payload (Mirai)", "value": "47a9dc8fddd23df56816974a0f86cde7d834a662284fadae21db47c537296889", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231812, "uuid": "b34dc834-48b7-4363-82f0-ed2baad411ff", "value": "T173A33B9AF703D6B3C84305B1119BEE6F4D31BAB95835DD49E3747EA0BB228C0B901B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231812, "uuid": "5b279107-8745-4cf7-bd0f-1e09efd5ff4b", "value": "1536:9kTHaq9Mp+ajZMjjNNlZPknO6WjOLgZvUXJ3GeLIE+uc7kQRk:9kra0uvujNNony6LB53VL+usR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777231812, "uuid": "36f39c0a-0409-409e-9eef-17b07dd99ee4", "value": 99896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231812, "uuid": "e5fc0d27-89d5-49af-a0c8-647a2cc4f8ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f3ae9db-41a6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777231824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "a0aa53c1-8725-44d8-845f-626c30fa599f", "comment": "Malware payload (Mirai)", "value": "744b6172d5045caae5e7f99c913964f3", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "99f62970-2500-47e1-ad3a-5c58456ca366", "comment": "Malware payload (Mirai)", "value": "40c16d982a694ac26066288cc8680d572e4f77212e1310f91b45d351a18f634d", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "71b8b6f6-d52d-47c4-8266-c0433409a7c6", "value": "T1ADE3FA48F9515729C3E373FAFB8D468E32231FD8E3EA30219E305B6123C5B961A759", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "7976f0ce-6efc-4976-903c-c61f104d578d", "value": "3072:JvPnEIgBijahpijCx1sRgtOL2dvhK1on7:JvffjahpijCjsqOKdvhKmn7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777231824, "uuid": "f942a74a-7dc3-4c50-9348-04bd243c245c", "value": 148760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "59c6fe11-ea5c-42b2-aceb-b434b4000df7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f4944fb-41a6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777231824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "af6a797b-bc11-4b2c-bca8-678ed6809b6c", "comment": "Malware payload (Mirai)", "value": "450ce2fd3f04b4c2779d8daab25e6c06", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "3c14ac6a-d795-4e2c-835a-240e5290b09c", "comment": "Malware payload (Mirai)", "value": "f71b9c73b05234ea6f05d7be8aa38271156ebe2adbcadda647ef30d961dd29cc", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "ace903ca-acce-44a0-8e9f-085a9c341e7a", "value": "T1A5D3F948F951972AC3E373BAFB4D468E36231FD8A3DA31358E309BA023C17D529759", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "f60b14b6-bf6e-4a56-928e-086ea50e2bf5", "value": "1536:ninpEzfpTvQ+h0Pzx1dWxsoc9Jmd95mg2iYbqVanWC761VRMCBiAX8PjDg7D/V57:2Spk4sJ495mg1Yb8anSX8PjsfV99sMn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777231824, "uuid": "f7119666-4d3f-44dd-9826-6aa3900ff8e4", "value": 131700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "21045aa1-afd5-4db1-9a2f-1a3c8d1de219", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f471a33-41a6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777231824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "a1ae1498-befb-4ed9-b183-caab68b28388", "comment": "Malware payload", "value": "93f57b9c837fcef7d3c14152fe76f7ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "8b537d37-163d-4369-8a7f-def6c7497399", "comment": "Malware payload", "value": "be675fa18bbac3f5e4808353a00be155b8d73b1ecc29c62bb92ea03a8a72b41e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "0fdaa98c-da56-4f4b-9809-917a3bea050a", "value": "T1D1B32A85F342E0B2E10310B11186DF665931EEF72124A82BD7A47FB1EE351C2A665F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "683748eb-6ba7-4e36-b572-990d8029eeb4", "value": "1536:Ryivdy1eWeKiIElwMaOQ7NWd2Y7nFlZ/no4DLtq6U7314eA6r:0d19Elw77m2YpwYyiNi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777231824, "uuid": "d02f2d6c-13aa-459b-a113-2e6e646baeb0", "value": 108476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "b1f35ce9-2bb5-4271-9315-5e69e3298442", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f40f6c0-41a6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777231824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "aeb2d887-6abd-4d78-9ab1-879b07ab5ddd", "comment": "Malware payload", "value": "7cff1a80291eadc9712264d5cdbd1670", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "d32d8df0-e2ef-4c9b-9395-668711b401c0", "comment": "Malware payload", "value": "76558ff26e724b7c46c1f2049703c8989ed5498ce7e4d4d4865745a791d5481a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "3debf3ad-7770-41cc-9982-a2bd1ca5d9ee", "value": "T160814FDA01911436EE519D7E62BED1C8738CBCDAE9ED7A7890FE7960C07CC91F804A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "ceddf8a2-84f8-4966-a309-ebfac49cf87d", "value": "48:VE51NXE6EQ1TcE9ET1PhEonEU1DsEwEI1b4EZEH1pdEWH4jEX1+WlEydqoE091aH:fRdqm6j/PDX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777231824, "uuid": "12f7476d-3426-481b-a815-665cc847dd99", "value": 3988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "9a86e4c5-fdbe-4df8-ac4e-0011cbd3f199", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f480141-41a6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777231824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "287b7b58-0a76-43ce-b624-38032a7dc35b", "comment": "Malware payload (Mirai)", "value": "150f2b340634673db1a35fc9c89a482a", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "3970d89a-02bc-4c29-b3e3-c17313502696", "comment": "Malware payload (Mirai)", "value": "9e7eb508f1fcd95c40e2cf5b1e9442d068f7073b7d11995e2d94f7e916712d9e", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "ad94bb7a-3a03-4f8d-83c5-615eee481934", "value": "T187C3D748FD45972FC3E3B2FAEB4C06CD763A1F98A7DA31265A345EA023C5BD129355", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "67a31d30-c19e-4296-b1fb-a91897f6c635", "value": "3072:FKA958DAN16ofTMoMt5eK5I3rsOZTIYq:FKA9UXQMjeK53OZsYq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777231824, "uuid": "ab37598f-96ce-4194-872c-0f276f78b3a7", "value": 119788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "4647e42a-8fc4-4ab5-8f6b-dff9fcfbd29d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f4fd9fe-41a6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777231824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "029b4fa6-76bc-4549-bf8d-ad9ab8cb741c", "comment": "Malware payload (Mirai)", "value": "fe9e3b0c9fea2798e0554ca7f33989f3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "dcd30763-31bb-4fbb-86ee-71ce2b55dd8c", "comment": "Malware payload (Mirai)", "value": "9126410c789b7aa366f7b17e3a6e80e89a9f5f31db74e9213de310d44d6851c6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "e3fd9222-71cb-47a4-90df-8965e41736e9", "value": "T1B5A33A91B742D673D10310F122DA9F211832FBFA2469E556E3B57DB1EA250C1EA12F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "a58b551f-5f2c-457d-8a1f-ff2f3bd10a63", "value": "1536:aSnXtbrYHY/LQIFJNofx31hvCh1fSZyfP32LJI2ZZQnrLQ:aSX9pLQINofx31hKhZpXmC8E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777231824, "uuid": "25c558e0-a269-4729-9e23-c46b128b453e", "value": 98168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "8c9e6981-8b93-433a-b4a0-588d6c31dc5c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f4e6979-41a6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777231824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "d748ec4d-6dc8-4846-bb16-2d45415fd172", "comment": "Malware payload (Mirai)", "value": "035c9f894bb500d8dc3fd7b8875e55f4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "5449218e-5c16-453e-a8ad-baa881fb8dd9", "comment": "Malware payload (Mirai)", "value": "deaebd8756bddb1f46a519b4bf61609073f8100d59f70e3a0b97bc5d7cd8881c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "445f7c15-e2b8-4cd9-8893-e17c4c3db6a6", "value": "T1FD04635ABB619EB7DC0FCD3301D94902208C959A52E93F6FB6B4C618E74B94F08D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "2b85b2bb-88e9-48b8-b10e-df3890e3d233", "value": "3072:lSeeMyURMr9Q7PaZaJ+xiXMvwGhMKMMm:l6MyURMr9Q7PccKiXMvHMb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777231824, "uuid": "426ca88f-f43a-45ce-861f-62e16abb65ff", "value": 176120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "e6226771-c52a-4aa3-b055-41878e9ffedd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f57c945-41a6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777231824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "e33f66db-69e7-45be-ae9a-b4eb7e74285b", "comment": "Malware payload (Mirai)", "value": "4979934544bb6566e194b2f8908d3005", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "63e1cc0b-3903-4acd-a802-5fc365c90a65", "comment": "Malware payload (Mirai)", "value": "8bb7735c75b560acc51afa96559e892e062994829b63d89cff0b29ef91e6d2c9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "a66e5f6b-99a9-4f44-8ffb-8b166a6ed377", "value": "T190B3398EA5A25F77C016B0B078B96C750B19B9C42B5F2EC57579A7A0434F5CAB00EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "0fb3d519-e1f7-4db9-9be6-d4027d1503ad", "value": "1536:H7cuYMoArgXrdeQEe0EE9LFgbf6Wm9Xfa/uEsK+bKKjwE7hitRwCAQdVqWGk3s:bB6eQEfExfVmyKRItRw0zP8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777231824, "uuid": "1aa10719-7209-4df0-8d35-5dd0d46126c1", "value": 115736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "e6c25c06-614a-444a-8103-fd35dfbb3233", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f5931fb-41a6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777231824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "311db9f6-a980-41d8-9fed-84cf7522baa0", "comment": "Malware payload (Mirai)", "value": "a4047aaecbcc7e2aaee3e65c3200fd62", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "3919f733-7587-4d48-bf62-e3c6c4e4b813", "comment": "Malware payload (Mirai)", "value": "0eef60dbcb9f788c9445a28746467c642cdb44c5cba160aae6a2182cc21bca4e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "d077967c-72c2-44f6-8084-d19970441b5f", "value": "T1BCC3E897F801DFB7F407D37604934C09B530BBE50AA25A72736734A7AD760D56823E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "616b80e8-55ee-4b20-825b-654dce8aacaa", "value": "3072:Kpu0+8YpAy+O3y8+ihRA1XttbI30yxBYFt:W0Aihi1P00yxGD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777231824, "uuid": "0883e365-95ce-4d7c-b284-d42856427251", "value": 123048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "8f33fe2a-75fd-4eea-aa82-67ab51b72c30", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f52ecb1-41a6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777231824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "5e9cea49-98a7-42f1-ac1e-603e7b506d10", "comment": "Malware payload (Mirai)", "value": "b80ea5bb64fbd768b464fa02a15f5423", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "6741e0e3-fdf4-40d7-8f3c-6b3ff3e3d035", "comment": "Malware payload (Mirai)", "value": "724b7a82a4d871f94585bb7bece99bdcd97f7af293d0b9be3af2156b033c492b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "3f05aba1-70b6-4dd2-90fb-4d838ec9a1bd", "value": "T1CFD3B63F6B230F23C0C6107112E71632B8B5D7C934B897D7A9E06DA92F299943546B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "6a60a74b-de9e-440a-a5d7-7358b333c049", "value": "1536:qN8ksW8aVo8gd7Qy4tJNN+q53fiKMEmgto1SK:NnjapA4jNNt3ftesK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777231824, "uuid": "94bcd99a-f079-4a01-b0d0-52f5a6d2efec", "value": 136024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "16ca7a61-1024-40e1-a1cc-261e5397b442", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f615a49-41a6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777231824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "935f1ed0-9d95-48a8-aa79-2254b01a49fa", "comment": "Malware payload (Mirai)", "value": "2f5df7e178b41eb27f4ef0230a52adaa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "86b9e85c-c564-4504-a9c5-e1257129c044", "comment": "Malware payload (Mirai)", "value": "169c4571a232a0cf8e491c812ff4216bb9dbe2cdc8dfbe36e1385c4f50be552a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "fe303f53-4776-4937-91d5-85700eb75e84", "value": "T1C404433E7E21BF7FE268863107F66FB0C75921D232E19241E17CD2185EB528D189EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "d5d672ad-c7f3-4e84-8279-0a46f241a20a", "value": "1536:CGb6ES9SaWqOFdyW7d6VAie2rK4zTTs/3R/CH6uT4MHCYNJ2rK4oHyWaH/uNkdYV:RFrdSspAaUVjn2y0WyqSkcnnY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777231824, "uuid": "ede279b4-bc65-4dfe-9a64-667ae521b144", "value": 176088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231824, "uuid": "2a29fd57-d699-46d7-b0b1-4a8526fd7829", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51b7f5cc-41a8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777232660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232660, "uuid": "db1df36d-0939-458c-9376-3d9d18454e8b", "comment": "Malware payload (Mirai)", "value": "4e8570e69225deb532fe500249f4dc68", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232660, "uuid": "1f723013-75c0-4092-93b0-0836033e3bf0", "comment": "Malware payload (Mirai)", "value": "a8df7d4f397541e11f9dd691be7e3980fe47506e440ee2a66a2dadaab7d04d36", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232660, "uuid": "f9dc9129-e3f7-4678-a973-d8a7927e5516", "value": "T1CA13F190DFA9B04EE678B4F005A3665BBA64FEF2C90348CF11381F65077860CA9DE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232660, "uuid": "e890b3ce-7727-41ee-be8c-5e30798a3856", "value": "768:KWnhkpHhY5T62BSJRacEdB8ck89tvmqJHs7TPCFeGRXYaLIneiDh3Y4e/W:KWnKpHhY5m2CacmvfJHsqFeGtNLIneqH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777232660, "uuid": "a3a41f17-0d76-475c-be53-0660acf72dc7", "value": 44412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232660, "uuid": "5cf7e444-d39b-44c8-a224-ca47e7173453", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "535bfe6a-41a8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777232663, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232663, "uuid": "1f565b7d-5fa3-4a45-9a62-257cc4c6f535", "comment": "Malware payload (Mirai)", "value": "6e5b253089b9c87f482091b405e2f3d0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232663, "uuid": "52a1b252-3bbf-4523-8164-79aa795f5b33", "comment": "Malware payload (Mirai)", "value": "ed7052692220b1972b8c66636027a339d8e249caf44c5766f9fe6b1d5c48c9e7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232663, "uuid": "58496698-4ff0-4d4c-8f29-463149fcc3de", "value": "T14213F1D8616AE4BDDD32913A42CC6BCBC6F76ED25E0B600C25E94EE44FF30D528364", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232663, "uuid": "b53703ea-f260-48f8-a823-61da76b13b49", "value": "768:mHsa5QDovTv4hh6NvOWcV3GI85VxHBRPqwSrSnCym5u04EnsK:da5ooLvUh61OxV3liVPRP7nTz2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777232663, "uuid": "fca803f8-b6bf-4eaf-b9d8-807485261626", "value": 42088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232663, "uuid": "75f11a98-2537-46c0-9a0c-29962242efe2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "537fc190-41a8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777232663, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232663, "uuid": "63755d17-b00b-422d-8561-5246e6b27f8b", "comment": "Malware payload (Mirai)", "value": "da8e7dbd950c773953a37cffd1de82e5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232663, "uuid": "ab67d703-7dbe-4d03-b8d3-343fce5e84c1", "comment": "Malware payload (Mirai)", "value": "04b314ebfad0d5cfbc156c7d625bb7664a0162ec42e584e688cd046bbe2dc9ad", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232663, "uuid": "46e2c7dd-9fa9-4605-95aa-1ac73fdeb5b7", "value": "T1689328C6B401DC7DF80FDABB4463290EB630E3611A935B26675BBD53AD321E05917F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232663, "uuid": "1be835e1-c50d-4464-9685-ba7330958079", "value": "1536:LsdLEbXJld3JWU6FRs/yNLn/MiBQ9FW6O35Pb8bMThLbKrTsX5vH1M0zfTnVQ3uF:LrWXFIyNLn/Cw6O3BfuAvVMqYuaB/wz5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777232663, "uuid": "7032c19d-13f4-4387-9c4c-b82c8d63dd03", "value": 96732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232663, "uuid": "1dfe0fa6-f844-43e2-8e41-0e5b0660a815", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "538f508b-41a8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777232663, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232663, "uuid": "33fac10f-9c0c-49ef-b0d9-d39a411b4393", "comment": "Malware payload (Mirai)", "value": "ea29b6027b9c9fe97eb4e8be1ebed40b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232663, "uuid": "d6bfbd15-358f-417a-b7e2-0c71509097a3", "comment": "Malware payload (Mirai)", "value": "b10283196319b985e2e8c04cfa8e52f7089b6f1ad8949e49432bd79414459fab", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232663, "uuid": "ca12b0a2-cd9c-45eb-b069-14b1bab0d98d", "value": "T14703F1916B6C4905CC4EA2BD830B6EFBF4730A024A9FB55A3DDD4ED38862170E2F49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232663, "uuid": "cd4c612c-67c7-4cfe-b34e-7e0edb9edb72", "value": "768:Y2kfZ/bHf9x73X0LRk5OxSxgunI7BtxphmYEHWjUfByv9pMTZqrHvoZ:YnZbHXU2oxSxgYItt7oUvrMTcW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777232663, "uuid": "aa93886c-06b2-459f-96a5-6dad18badb6c", "value": 40444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232663, "uuid": "8ed6676b-c3d2-4901-a51f-a21f5232bce4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53989b41-41a8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777232663, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232663, "uuid": "769cc01f-5b33-4fdf-8d2d-c4cf50ed374c", "comment": "Malware payload (Mirai)", "value": "daf005d8b9e63ba097393fcbc3f1fcf0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232663, "uuid": "326ad9dc-266f-41e3-9c32-faa010631ed0", "comment": "Malware payload (Mirai)", "value": "c1afb04669793bca31bc3254c7e2224ffc4bc7292a0bcdbb724b5ce5ba2f5619", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232663, "uuid": "3e95b962-137d-4dc5-b715-445be627fdb3", "value": "T1B6C2E19567A3F70EEF16497147970A96E673340C2D6D893A601C7C21896F84BABCCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232663, "uuid": "f4f27646-6165-4d05-bf10-005eaf4a04b7", "value": "768:gshw8UP2T1rBPUg2xu3aW2fZpNLcxssH34dRQ:XUP2DPU6r3heRQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777232663, "uuid": "3897fba2-7fe8-488c-8e3e-9ca4a63badb0", "value": 27076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232663, "uuid": "17606dec-5ac5-437a-a81c-50ed48bf7b77", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53ba0f2f-41a8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777232664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "c85a6bb3-14dc-4575-a65f-a23fbb6267b2", "comment": "Malware payload (Mirai)", "value": "7d29cf40c2487cf8fd5ca79043397079", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "7f5a1d7e-be97-42fb-b9fd-ac0c7f55670d", "comment": "Malware payload (Mirai)", "value": "f2017b20e3b8874ca6faea957fdb138c150f70ab3ba95725c040e220409d719e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232664, "uuid": "9d1a7337-dbd4-4f50-8bab-fef5f344571b", "value": "T119230270F48042B2FA31EC71846D0A11FF97689A2329E58BD04B2F7256F48277A59B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232664, "uuid": "d745ffa2-f2fa-4163-890f-915446585b2e", "value": "768:i9kiBVrBtliBtG7pcv3gQJ494kjvl7kzl6XLF7vmoCfhLDhfPStHku89ry2xT/ff:i9HrBniBteCPJJ49VFkp67F7v7CFhfKe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777232664, "uuid": "eaf4e102-0e86-4a70-a89c-813c978d53af", "value": 48352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232664, "uuid": "33093b65-ac2d-4872-965e-e386ed2b0628", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53c2e94b-41a8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777233802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233802, "uuid": "bcb54b4e-7122-4f54-bad7-b55ddfd91054", "comment": "Malware payload (Mirai)", "value": "5850afc9536c210446eee709b2bdbea3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233802, "uuid": "25a42ef0-c882-4e90-aa18-698907ecb640", "comment": "Malware payload (Mirai)", "value": "27bdeead25004c556afc384f1e6e739edc085a3d1b91868b2bea51beccd1ea79", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233802, "uuid": "3782db8b-12ca-4285-ad12-543845c46336", "value": "T105C3AED7F68B24A1CC6146F007C76BDE2E6361119E6BE9E76C0E663B193A0DF19063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233802, "uuid": "67465a37-c3bb-44de-9a9c-7f9affad8d23", "value": "1536:BH6XXWAZxg6cgoWZKxtHQEyhBGLaDWql0W4s2sieEg6tCwxZJehgxd/LWg:J6XXhxr4R+BGL+tJ2sd6tChhgxdq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777233802, "uuid": "7c64f1ac-55df-4845-a156-6568c3be41c9", "value": 124352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233802, "uuid": "b654b865-c960-458e-a7b5-b491e5f01a42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53c3b6c7-41a8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777232664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "27fb62b7-03fc-486d-a20f-13ea99405a22", "comment": "Malware payload (Mirai)", "value": "ac28519e4915f43ed20f1eb7eaeecbe8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "7a8d7e68-5a34-4867-aecf-5b548cdd5e68", "comment": "Malware payload (Mirai)", "value": "6f8dc9835845122c654b30ba23720c31adb88c7822d9393b0fd1fa4f77a0365e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232664, "uuid": "8db47238-5382-4fc3-b64d-633f9ab9ddb0", "value": "T1167302A423B87D4BE3067EA5928715923BC978D03A6E0647BE034E1780FF89D1D7E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232664, "uuid": "863f4ed1-bc74-47f3-a096-6ae1e459b1ca", "value": "1536:ot/57cJDRHxxlMFImUy/5El+vflRo/36W4k6E9e5SZ9YYtr02SA:+xkRRPMFImUy2lgY/KW4k6EeYm2SA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777232664, "uuid": "ff21fcd1-dca5-46ec-af05-022fb2cc36b5", "value": 77580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232664, "uuid": "6b066d64-e13e-4cba-8622-75db336e86d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53c373f4-41a8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777232664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "3f951c15-7e98-4a25-ab73-0f6b6eb74f30", "comment": "Malware payload (Mirai)", "value": "e7ff5af8292f2323a8638e338b246127", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "e8baae35-54ca-4886-9cf8-4e214c46555a", "comment": "Malware payload (Mirai)", "value": "a51f6c0fac09df29fadf58e23fc52f62a4cecfe53ab03959ce42a9d03c9c82c2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232664, "uuid": "a8bb160f-a610-4a00-9ac1-28b3f02c8b2d", "value": "T1502302C971200319D3B5193206C8A284D397FFDC9EE6A2DFEBD4A0AA2775483F1D2E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232664, "uuid": "a9ece377-d0cd-4680-ac36-56c899f16afe", "value": "768:WI+eg11UY5hgLnHzt754NqIm7P1D0l4SzgmnPzNvG6uh3YPYplbrJ2IFUm2mELr7:W4YcL51KY1LS0mnbNvG/h3Rf/J2+2DLP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777232664, "uuid": "43e8139e-4577-40c4-b13b-aae4fa238bea", "value": 46748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232664, "uuid": "cc77e83e-6092-4a35-b079-2bda6b4f1d9c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53c50e49-41a8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777233801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233801, "uuid": "c9038884-3c31-45b7-8776-892fd4984918", "comment": "Malware payload (Mirai)", "value": "cb2d7d310ead6fcff9b0c73e164ed70d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233801, "uuid": "00823ac0-447a-43ff-9880-98afbc0321c0", "comment": "Malware payload (Mirai)", "value": "a070eb76bba5c3ed698ffd2f534a9a917aa8deb2d238cadd2522b58f769aa0d7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233801, "uuid": "4d3f4826-ff20-473c-93c9-4c705fc4822f", "value": "T17D13F1FD990E336AE6D79A7AB47587254A3F3EE5EB887F1FC340B006707991474628", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233801, "uuid": "a94d7ffc-4fd0-41af-8be9-fe839058102f", "value": "768:VlkWoNuBjL6H260T1PanzjrpfRpdSaNNs4LphFzQ+jVIGJXFbfsZ:7k5MB/U2zTcnjSavs4LphFQwbkZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777233801, "uuid": "5f506502-206f-492f-b4ce-a8d30bbb7ecc", "value": 43148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233801, "uuid": "dbad505a-549f-4760-b016-584488cdc6f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53c9d036-41a8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777233801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233801, "uuid": "657a47b8-9cf3-4ec5-ae18-b961b5924f02", "comment": "Malware payload (Mirai)", "value": "a3a314d49d929b3297feb364d53adb6e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233801, "uuid": "b84d2378-2112-45a1-aac5-ba323b97e129", "comment": "Malware payload (Mirai)", "value": "dde05f7c8cd529666b953aac0b06f10343c3f35554987d74452836f1ff35f0f6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233801, "uuid": "36c4dbe2-0c5d-4671-bcc4-c45fa0f7fb8b", "value": "T1AE1302917396799FCBD2533B823C2CDB0973B502AAD7DF9E32E457E0A5274F181012", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233801, "uuid": "569d75ff-f99c-4c01-ac81-5123832a675a", "value": "768:X3/FQh9sCCiwPUCLJyBJdFhyUxBrERZ3XchdVzcMgzqhrh5wlzu7hspnkF3/b17S:XvFw9sC4AJdX7pED3MhdVcM7mlzu7hQ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777233801, "uuid": "23dbb316-3de8-4ac6-bfbb-02002f39d7b4", "value": 42776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233801, "uuid": "7436741c-0e60-42b1-ac6a-03a7a6b2cdf8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53d5eaba-41a8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777232664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "d27ecee5-ab50-447f-8937-c54040f628c9", "comment": "Malware payload (Mirai)", "value": "86ba24948cd997ce49a53ec818eb2602", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "09f32e73-cd6f-4148-86e2-d1cab80f7057", "comment": "Malware payload (Mirai)", "value": "65f33ffb54e154496663f04b9f5dd408d3a11d51e0147834e5c751ea826e6a99", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232664, "uuid": "a14d32f7-e3c5-4add-aa59-98d4021085be", "value": "T19D739E23C87618ACD25842B8B070FE3A53B3E51056572FF7069ACA7A9447EDCF9453", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232664, "uuid": "e5bef415-3240-4824-8a78-8499d5038316", "value": "1536:0/Zd1XEc589PJ9E++KrpgE7YgJMiCYKkN3sk3:0hd10L9UIrbhJMiS68k3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777232664, "uuid": "7f681f17-8bcf-4251-b06a-e23b3957e859", "value": 80408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232664, "uuid": "c17f623d-fb62-4305-a236-fa554f1e3ac3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53f78bb9-41a8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777232664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "553e4d98-6486-4766-920b-71e82ad4e448", "comment": "Malware payload (Mirai)", "value": "46d575625657dd2362eab445230c4024", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "14aa958e-b1b6-45a4-88ea-d1fea4f6df84", "comment": "Malware payload (Mirai)", "value": "fcd36da75ec940f421b843d8cc85e949d43b46718e596d485e2548979f5fe0ef", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232664, "uuid": "ccd3e07c-f86a-46fd-b4ce-698cb8bef5ad", "value": "T1223302C97F51C78CC92DAE318023E9CF64150DB3786B65FAC668C812542FC7A287ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232664, "uuid": "1fe141ba-f281-4866-b902-4a0fd081e1e9", "value": "1536:/NRtXYi7OE32oRKM2PAcOYUJM89VoolUlE9lDQ:Vr7fmocrPAceiaVBUlEc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777232664, "uuid": "599894d4-edc7-4849-ae31-f5b5bf44f74e", "value": 50304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232664, "uuid": "901d953e-caec-40f9-aad8-aabd0bee3426", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53fa66f8-41a8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777232664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "d3fbaecb-a829-4eb1-b5e2-be2e5b5c646d", "comment": "Malware payload (Mirai)", "value": "ec0d9ad580ab7de6cc0121575ccaaf33", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "7e13b66a-a747-4af2-a3eb-2efabf08c802", "comment": "Malware payload (Mirai)", "value": "dea9727f5f97518cf2f605b903a7019506eec4137a1e55536ff155250957f763", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232664, "uuid": "38a36017-968c-497e-8037-7fa6919288dc", "value": "T125935B22B539193BC4E4947722F35326F2F6438A14A88B2E7E710E8EBF156D026477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232664, "uuid": "59769ba0-e89b-4551-be5c-7587cae2c432", "value": "1536:08RsLd2/48pr4LaYqPoQatq3KtHw8Ym5owAtQItt/B:0USjsF6R9YOlW/B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777232664, "uuid": "5cc04cd1-b8d3-492c-ad8c-8f4b85e29c2b", "value": 91968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232664, "uuid": "91f0723c-4fd5-429f-bad3-4d2f71e0b2fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a7f7123-41ae-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235359, "uuid": "e231d8ec-aa63-4350-963b-a2c1df99416b", "comment": "Malware payload (Mirai)", "value": "c009ba3d87480a5f1601530e8ba2bb29", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235359, "uuid": "368fee88-379e-4799-ae87-da5b2a19f6e4", "comment": "Malware payload (Mirai)", "value": "9fd33f75aba6fe186678a8989a8e807dbd2a15c587a1a4229e4136fe396d5c88", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235359, "uuid": "e25a0c5f-e7de-49da-a73b-ee1f5c7d05a0", "value": "T1931302BCDA1933D7E34AD877E021471C5BBB58D993CAA72C9560BAB27460816C3A78", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235359, "uuid": "821e7edf-7869-4368-8e78-43ad5f109063", "value": "768:qlcWoNuBjL6H26MT1POdGETorqE49uOiMDnNlzmaCVGM//ckObjR8WRrp3fsl:ec5MB/U2LTcGETuqE4I4bzmaCVGUUFja", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235359, "uuid": "9b6259cb-8619-4339-a542-c8dcd1080e5d", "value": 43140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235359, "uuid": "00b5763e-00f5-46c8-8b99-f36050af1237", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bc12010-41ae-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777235361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "e7be198f-b735-4720-93d7-c7c5b39658bf", "comment": "Malware payload (Mirai)", "value": "410e3a9f8d714a4559f742bc8fbed175", "object_relation": "md5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "55ed9268-5375-4f54-940d-12777d009acd", "comment": "Malware payload (Mirai)", "value": "05c435a4a852396e89e91b566311f4782b0faaf4f0cd22329680b7f8217c6702", "object_relation": "sha256", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235361, "uuid": "34faa009-bc01-42e5-b183-df732f878358", "value": "T1FB6181A5290B8AB22CBA8F6322AD41143187C1E61CEF7F55DBDE24E888ECD56F4407", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235361, "uuid": "d8ec03f9-333e-4aaa-b2e5-7ac2050d0420", "value": "96:i2J12gb2vB2QD2y32mv2jp21V22zL2RZ2Yz2k/32rpL2zd2wbY:nJEgqvwQyyGmejY1k2GRIYik/GrpazsH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235361, "uuid": "f2f33b10-74fc-493b-8767-508cf62643eb", "value": 3284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235361, "uuid": "32ddd130-9625-4fc9-9489-4805d98c74d0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0fa74e2-41af-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1777235826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235826, "uuid": "7c87a304-b8c5-4494-93e0-16f26abe647c", "comment": "Malware payload (ConnectWise)", "value": "0656b4b9b56aac7de1436d6a0dfbadff", "object_relation": "md5", "Tag": [ { "name": "84-54-33-157", "colour": "#ceb1fa", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235826, "uuid": "ea2c1360-35d7-4d38-b6fb-2d3653f64dde", "comment": "Malware payload (ConnectWise)", "value": "a6279a3a01c8a00e42bf368ea50a22ac606761610aceed08aaab875ad11db853", "object_relation": "sha256", "Tag": [ { "name": "84-54-33-157", "colour": "#ceb1fa", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235826, "uuid": "0c76a5b1-fc84-430a-b122-a868ea64fbec", "value": "T1E8646C11B9C48432C673383147B4E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235826, "uuid": "79e07e3d-f823-4798-99da-8dcab19032db", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235826, "uuid": "19c46db9-1594-478d-b308-a6a29d36a6ae", "value": "6144:ymlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:R1iw7gryNkSV1hy1Z1u2JLu9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235826, "uuid": "194e1bf0-f914-4bf3-a397-5b9ae8be3659", "value": 312544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235826, "uuid": "391c50b9-3505-48d6-bb62-7312c6bb5ea0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d48caaaa-41af-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1777235886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235886, "uuid": "3cfbad41-4e15-4171-bead-87446f189104", "comment": "Malware payload (ConnectWise)", "value": "080ad02b7dbb52e818304d90f64f48bd", "object_relation": "md5", "Tag": [ { "name": "84-54-33-71", "colour": "#b26f9e", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235886, "uuid": "358329d9-7d76-4e81-9866-122bb654b75e", "comment": "Malware payload (ConnectWise)", "value": "b491bc4386433ae495460f15a052b104eff90b278a63fb6bed85f63c8c4018fc", "object_relation": "sha256", "Tag": [ { "name": "84-54-33-71", "colour": "#b26f9e", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235886, "uuid": "5f3e02d9-2efe-4f99-a6b7-3e30d9c12c63", "value": "T108646C11B9C48432C673383107B4E2B28DBDB8302D655B9F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235886, "uuid": "b29f39ce-b164-460c-956b-908089ab8852", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235886, "uuid": "7561bd54-c347-4eb1-95f2-7f1541d03024", "value": "6144:1mlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFti98J:A1iw7gryNkSV1hy1Z1u2JLI9W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235886, "uuid": "c4292523-2860-43ff-95a8-0f482c458129", "value": 312544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235886, "uuid": "26852712-272e-40b5-b79c-dd98c7ccb2b6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6001d8c-41af-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1777235889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235889, "uuid": "a0e62f35-674e-46f0-8f7c-47a2ce7096b6", "comment": "Malware payload (ConnectWise)", "value": "f8789269ca9432c7d8eefd946d85d2fc", "object_relation": "md5", "Tag": [ { "name": "84-54-33-71", "colour": "#b26f9e", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235889, "uuid": "aa4531b7-011c-4e50-bfd8-4b2d8569da75", "comment": "Malware payload (ConnectWise)", "value": "1151c11c4e2a407d9ac3fdbdaafd6ba876b700624109f4019d372e00c6e15692", "object_relation": "sha256", "Tag": [ { "name": "84-54-33-71", "colour": "#b26f9e", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235889, "uuid": "206bb27e-f3ab-41cd-942f-f78b4ed36619", "value": "T1C546F141B3D695B5D0BF0638D87A42A65634BC108712CBFF57A4BD296D32BC08E723", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235889, "uuid": "af780cc3-c918-4ca9-a12f-f62e4051c794", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235889, "uuid": "d936239f-1704-4ce9-9e73-bc03deffe6e8", "value": "49152:afRBDtJkGYYpT0+TFiH7efP3nrGLq7FVsLBe+1GVxrKlsuwGenGwfZVkVjOi8if0:Gqs6efP3rn/TYGVxz3GBwRVkGuyXOM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235889, "uuid": "d9fd514a-d0d3-4ba3-b186-da3e79453467", "value": 5672400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235889, "uuid": "e3c1f139-0d7d-4d69-855b-caeb6c2ae5ca", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f84762b1-41af-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1777235946, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235946, "uuid": "4d7fd990-0c01-43d5-a002-78b6dc901f4c", "comment": "Malware payload (ConnectWise)", "value": "b775d36ef830a8dc15957f84707bbd08", "object_relation": "md5", "Tag": [ { "name": "84-54-33-214", "colour": "#36bd74", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235946, "uuid": "e9f78dcc-ec0a-4a44-a176-96c73d76b369", "comment": "Malware payload (ConnectWise)", "value": "05ba3e93942cd4b71ba8f29ade598c7379e6c31da4bf4d4423a3b78403ebc735", "object_relation": "sha256", "Tag": [ { "name": "84-54-33-214", "colour": "#36bd74", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235946, "uuid": "d821835a-ebe0-4b4d-8c9f-dd5b85bced8e", "value": "T1DB646C11B9C48432C673383147B8E2B28DBDB8301D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235946, "uuid": "f0a14a41-ac8d-4b39-add2-8647e481ec49", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235946, "uuid": "50431abf-088f-49a1-8764-714a29a38bae", "value": "6144:amlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9P:p1iw7gryNkSV1hy1Z1u2JLu9P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235946, "uuid": "78cbdca9-011f-41b6-a6ff-ae2e65c56d30", "value": 312536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235946, "uuid": "3fbc0bf5-c5b8-4a80-91d4-9aa9669d0137", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9cb42f3-41af-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777235949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235949, "uuid": "3ac6e868-d6b7-4d0c-a8cc-b75f945ca5d7", "comment": "Malware payload", "value": "d652e7cf2a62d086a058ec06bffb2d73", "object_relation": "md5", "Tag": [ { "name": "84-54-33-77", "colour": "#b12170", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235949, "uuid": "6a0c47de-005d-4cca-81da-e472ba9b521b", "comment": "Malware payload", "value": "98e8d9c382b4639da213ec67d46575fd9b7c14649df1859fa6b05b209885084b", "object_relation": "sha256", "Tag": [ { "name": "84-54-33-77", "colour": "#b12170", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235949, "uuid": "ba3c6f10-c1f5-4b64-b0d0-c814c6437fb3", "value": "T1FC46E101B3D695B6D1BF1638D87A52696734BC049316CBBF5394BD392E32BC04E323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235949, "uuid": "df20d2b4-9c86-4eef-9cfe-563fe35768bc", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235949, "uuid": "e255785b-e6d7-4276-a5b7-1c2773fa1151", "value": "98304:CzIus6efPUIdoaxcp8wy5c3trGOlkQ5DUOgJ9zl:ChfefPtHxcp9ym3nltDUJV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777235949, "uuid": "eb27f6e5-211d-4e8e-83f8-5c3be70043d6", "value": 5641504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235949, "uuid": "081cae9e-8322-4f70-b1d6-e57e597d67c4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6650e7ab-41b0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777236131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236131, "uuid": "f342638d-3d2d-48cf-b687-4232ced2eef0", "comment": "Malware payload (Mirai)", "value": "7219ea9e039a602c77755c73f3a72514", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236131, "uuid": "50ce985c-71a2-41e4-82be-7f921ed1ae0c", "comment": "Malware payload (Mirai)", "value": "c7c5207a1613f80d8a463df707d093cfb1db3374c87db52eb86f47b2b2836394", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236131, "uuid": "4e21c8fe-41a9-4fb3-8362-d67fd8d2b036", "value": "T142A328CAB401DC7DF80FDBB64463590AB931E3611A830B27636BBD93AC321E15917F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236131, "uuid": "cdea5f0f-67e3-4453-9a2a-14abc933be0a", "value": "3072:GHHCKtK0cO0LT9eYUP5iOn02UQd83bnZVF:+CGK0t01wgO02c3bnZVF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777236131, "uuid": "c650b82b-2764-4631-8ce3-9bcaa78eddde", "value": 98844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236131, "uuid": "18eebf5c-68ee-472c-bbeb-67d562f4b862", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e392344-41b0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777236144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236144, "uuid": "7b42e142-3717-4f1d-a34d-369906467ca7", "comment": "Malware payload (Mirai)", "value": "32ef0c3eb23c670cd6b20a0421f88a8c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236144, "uuid": "f4b9d108-94f6-4477-b838-ee60be97e7cb", "comment": "Malware payload (Mirai)", "value": "c99c02330529253b033a50c0cc77d24e097b97ef0082e60d3312c4c65e45374d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236144, "uuid": "7e19476e-341e-4f1c-9982-3488e5099905", "value": "T1FA6302B8BF9E3196E9540030ACE387251D692AF7AD4B7E161D2260FE8E130073DD12", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236144, "uuid": "8a110c8a-ed5c-4c5d-9b31-a5a455055e50", "value": "1536:qm3iXA87kR6PMI865BZRPVlQrkMaL3k/LLZ2gPdhRRcVLQ:qmSZ7HPj7ttRX3kDLZ2khA6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777236144, "uuid": "1c40f365-f0de-4e10-9937-a771262d186d", "value": 68092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236144, "uuid": "dc6398a3-4478-47ba-bed7-507d7022b1ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "758a0f6c-41b0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777236156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236156, "uuid": "34a5f175-92db-453e-947b-c3a7e7c1fba3", "comment": "Malware payload (Mirai)", "value": "11adf7be27d8adb47d023453f0bb3381", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236156, "uuid": "ee93df92-ca56-4ed4-8a35-b6f03dfc8df6", "comment": "Malware payload (Mirai)", "value": "9cd5c1d637651179066fc0bbe3e554dca39d6dffbe64f5d80460e343287675fc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236156, "uuid": "3b46a2dc-fafa-40ae-a51e-740b6a522208", "value": "T1C4B2CF356591DDA3E824683BBB6DC843A292CAB59397B2233C0893D0B9D114767FC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236156, "uuid": "da3bc593-5bcb-428b-9600-71acfb5c97bc", "value": "384:4fV25V5+1HQsQiLZvvPhLlMxtLPgZeXFAmbUzcgaw8c9CCNh1XpnEbhymdGUop5J:sVYCQi1fZqUZ/CuZwCNh1Xp8s3UozuQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777236156, "uuid": "fd0e2e6f-cfb3-4569-9029-addd32268d2e", "value": 25712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236156, "uuid": "6479b3db-b792-4073-9b96-6e1fe0d5f5ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d1e727e-41b0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777236169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236169, "uuid": "71621133-eae0-4320-b244-ccb59ec959c6", "comment": "Malware payload (Mirai)", "value": "91214d62b241d629fa7f16e70f0672c9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236169, "uuid": "3af750b3-a349-4b34-b3ac-02d02e372a18", "comment": "Malware payload (Mirai)", "value": "7a866c4e71afd71f03c2b33e527248b651c1a75717fd0a75ab1641a4c5f14f75", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236169, "uuid": "7c298498-738b-445b-9d03-d2036ce4f5e6", "value": "T17903E15061FE4BE2D65B40F674BE244E3750D70DAE248CB3BC84F9B25ACAF4C664A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236169, "uuid": "9fd93bc5-fd16-4532-9d9b-964b0db9079c", "value": "768:0F1DbfTrL3QX9bKWjN+qGTnedgI7WzzZag789GGh/YFMtLynA1nbcuyD7UHQRjy:07/fToNbKWjwq6+gxzN7DDMt+nenouy8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777236169, "uuid": "ed7e0002-0ad0-4cf8-9b2f-2ec7138992eb", "value": 40380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236169, "uuid": "c12b73ec-4d06-412a-86c4-f6eb0411707e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86ffb5e2-41b0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777236186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236186, "uuid": "cdae9b3c-899f-4a68-8296-3ad87e426ef9", "comment": "Malware payload (Mirai)", "value": "0c1bab5eef8749d0e6acd9ecece4760b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236186, "uuid": "671102dd-21c8-44ee-9d73-06a00136973c", "comment": "Malware payload (Mirai)", "value": "1a4bed6c420861c0ea326ee48ccc6c915639a3e9ecef7c4376289763800248b4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236186, "uuid": "0a028483-9a15-4f11-aba6-2c8cede51934", "value": "T1A213F29792E4862FD2FE027C45CFEDEF0501D1295A48E0E9BDF475C4D692B38123CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236186, "uuid": "e17de5da-5853-491c-a9fa-553d2ae04576", "value": "768:HWQAQNQgkHDeiQbMwxN4HkgZIJC3N/hUTZ190NuKUW8inbcuyD7UGQRjX:2UCgkHDeigBH4H1IJKC0zUinouy8GyT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777236186, "uuid": "eb0884b1-2a6c-4489-877d-3d3ecd06872f", "value": 42120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236186, "uuid": "7a396924-fc4d-4f87-9fcd-ff1ca97edada", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8af5f085-41b0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777236192, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236192, "uuid": "8873f16e-9952-45b9-8f76-42741573fca9", "comment": "Malware payload (Mirai)", "value": "1e630cbd915eff8c09c56db5bdbf0298", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236192, "uuid": "67f8b8ba-7e07-47d1-a5a1-c51ce855c6cf", "comment": "Malware payload (Mirai)", "value": "a940ab51ed842445b8d832cb5bc9b5991ac21f065658195fcad21f7a5037f69a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236192, "uuid": "14927cf2-880b-4e53-a686-6fd9bdc8523a", "value": "T16513F11C3BCB50F9C13C42B6BA5103200AB04FB1A3C7AD4EE79D9883BD6D6B56596A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236192, "uuid": "72cde342-3767-46f7-bfca-8d6c2ee7498f", "value": "768:FSs6hhskdZtCOOK+8Ucic/Z3iVV87dpxhyFlRaJgGlzDpbuR1Ja:9qu82YJNB3yV8JClR+VJuM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777236192, "uuid": "2733c71b-3014-45fe-8c4f-e5c955de9574", "value": 43892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236192, "uuid": "ffe4d7de-50b4-42cb-b5a4-0b3663446245", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96c762a6-41b0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777236212, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236212, "uuid": "3fa8d75f-b61d-4c41-912b-3bca58820fba", "comment": "Malware payload (Mirai)", "value": "aa2c233e5131018aa3abca95b824be4b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236212, "uuid": "8040c8c5-4e66-4d16-9730-7bab8ccd4c21", "comment": "Malware payload (Mirai)", "value": "3a23de82b7714256e06f5fd797b417ab10be8e2c1582fda9bb1558a117437b80", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236212, "uuid": "f8921df8-9ae2-49be-9e6a-7b8f6a081689", "value": "T1CF13F1FE5AE2299AFC6C18BB51BC37B05E4C36C523475BC1D752AC09133196A289D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236212, "uuid": "d6669a7c-c367-466f-8199-89f3cb29432b", "value": "768:duWmKgbchPqQbpyrv195rBIoDe9/q8qlCIPpW+1AdXNDDhY5kWh:dRmKgAEQbpmf0q8qkIRoNDDhSb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777236212, "uuid": "46aac014-57b2-4bc6-b999-b5ad6aa059ef", "value": 45212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236212, "uuid": "944c83d9-9d3c-4ab6-8a17-6b1b4d33ea94", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e9fc5cf-41b0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777236225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236225, "uuid": "21a1d492-1099-40e0-b7f6-d79753022197", "comment": "Malware payload (Mirai)", "value": "6167421934a041c80063a0c82c493fc6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236225, "uuid": "0ac74df4-2077-4dea-84d4-a05a545990d4", "comment": "Malware payload (Mirai)", "value": "f2ab3aaaf45108702482161755fa34fc96949c2d434a3b641a6f2c42076e8370", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236225, "uuid": "83fd6720-765d-4665-a9b8-0f42382344dc", "value": "T1C1935C22B9791A2BC8E4947B11F75376F1F2478A20A8871F7D710E8EBF246D026477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236225, "uuid": "3b5e0f6b-cd38-4508-81d8-ac4003a76c91", "value": "1536:EB8TSuzjOL5DsNWjQ/rVTAWSkhce7etdyYm5rwmPbo9SNtRnY:t5fwaCzyYOrljNnY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777236225, "uuid": "b871f1cf-0d4b-4996-b215-790b0f507e43", "value": 94120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236225, "uuid": "cad924a6-1834-4dc8-a1d2-75d71e6126f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acac738f-41b0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777236249, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236249, "uuid": "7eade6eb-52ba-46b3-ad08-c3b7f0f273b8", "comment": "Malware payload (Mirai)", "value": "3605b2da54e7d27325cc08b1971bbf4d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236249, "uuid": "aa2fa061-2b66-40fd-89e6-e23b90b74eec", "comment": "Malware payload (Mirai)", "value": "9a816a0e0b4d89ce2b3b3a697176b265c0c4d2eb72777b86acda73d01baad205", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236249, "uuid": "bcd51732-8afb-494c-941a-53679e54b51b", "value": "T19A839F23C9652C98C59886B5B4A0FE3617A3E94466871FF716D6CA72904BFCCF40A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236249, "uuid": "e9adff13-44fd-4764-b495-fd137416ea6f", "value": "1536:u/sfu1Lpb2sf8oYiKKFRP7/HIfeJCensoLEEKnS1:uUfuNEsfSFKHDIfeJRfAEKnS1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777236249, "uuid": "6f47ff5c-fdd8-4b88-8cf2-905823b7b35d", "value": 83488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236249, "uuid": "e50e338f-a150-4f40-a6c9-82b60de1042a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3713970-41b0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777236260, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236260, "uuid": "1e3c2b3f-1aed-42ed-ba90-2cde865c7014", "comment": "Malware payload (Mirai)", "value": "019e9e27057a53404e1c7a8f8e4fbb8f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236260, "uuid": "e1f55dbc-4bbc-4625-a27b-d8a4c6317c44", "comment": "Malware payload (Mirai)", "value": "628630ab3e3669c0f67b8252c94211ca90a34fe14993a077f6931a7af47187b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236260, "uuid": "5610551b-b675-4dea-84ad-27e605985686", "value": "T1D413F17CDC2389B6D8E0A276D802CC1D725687DD92FD362815045BF88A84B0AFEF85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236260, "uuid": "1acc32a9-1ab4-4fa7-aad6-0c75bf3b0ee8", "value": "768:iyhMzp/f1t/To76Jy5HIApab8rWlP/uXevHrxs3Uoz8:lhMtDTtcoqwEWlPGX44z8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777236260, "uuid": "eab09254-f855-454c-af8c-fc641146937a", "value": 42296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236260, "uuid": "44649355-9e6c-4da9-8268-8c7cfa828e26", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc37d722-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777243576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243576, "uuid": "51f4baee-e921-4ec0-842f-c031f9da6780", "comment": "Malware payload (Mirai)", "value": "b02c01acb19a26c0ee4091eb305cb31f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243576, "uuid": "42744ed9-5bc4-4719-92b9-733c49853a9a", "comment": "Malware payload (Mirai)", "value": "531204cf8746ed75e686809a32ae7968a66d5eb26753fab233a28f334f0d35b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243576, "uuid": "7a1e7e43-6642-43e0-b3d0-9eb3ecdcf4f0", "value": "T164C2E171FE51FA32C8102D77D57E8DCB4AC64F7CA1FB78732A610C202AC59C656916", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243576, "uuid": "148681e3-4102-452f-a26c-6bf26087003e", "value": "768:JMKyhegCCMqfDHSYpq/B/TuA0yldOT/k6q/F9q3UELug:OKy4qfDHhw/Tu6Oz8gLB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777243576, "uuid": "800e6f79-a71c-485a-b153-30c921c33536", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243576, "uuid": "1f88972c-6693-4f71-8d79-e3d023f30a4a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc4197e3-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777243576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243576, "uuid": "5898ff27-6e29-4979-9591-e3c35bc94728", "comment": "Malware payload (Mirai)", "value": "96f4747f18802c995b7d7c0c72782d1a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243576, "uuid": "b57e31b4-1d5f-49fd-9062-44a38e871262", "comment": "Malware payload (Mirai)", "value": "3547aa00679e473d575d99d156770004aa79d9718de2918eee20b64ac611806d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243576, "uuid": "05957700-770f-4b96-85d7-68e7dd7ad955", "value": "T178B2D1DEA0D43009CDEE2CBD555E53324B9DA190738F9F69D7108D9C6BA8A0E748E0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243576, "uuid": "c93dc693-b047-485e-ac17-de93dc379fb7", "value": "768:cGrQlS07dEv0UXqUhvQE+CXHfnNsrRsf5F9ZqUWvz:vQlS07FUXqIYSX/nN4RsxFDqt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777243576, "uuid": "2f8250cf-5625-46e3-aafb-a9e8aae2aefd", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243576, "uuid": "d28c5da6-69d7-4d0f-b668-35b271eb75cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd37a6f8-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777243578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243578, "uuid": "f4c2703a-ebda-473e-b911-390197a77c39", "comment": "Malware payload (Mirai)", "value": "4aa925fa866782f27ac9716f1094ff10", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243578, "uuid": "1a8d071d-ee22-43bc-b278-25af7ddee724", "comment": "Malware payload (Mirai)", "value": "d1b4cba62f90f288bf4d421ff1a91f3a6e96a957b57e1346a57e3e3fb36c8824", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243578, "uuid": "71101bfe-217f-4eb2-9c20-fb7007e78372", "value": "T1CCA2C031219B2FA9D3BD2834C66AC246B35B1FACD1F431772A411E30DA5910B7F68B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243578, "uuid": "27d3aeca-df62-46af-8ac0-aa97894394f9", "value": "384:UvtIoZxrSniaXs+qx+bwqPXJDh/4YpD5y8WzzLhymdGUop5hk:UvQn4j+t/P5y8CLs3UozC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777243578, "uuid": "7becbafa-8bbc-417f-bb57-b58c76021264", "value": 22160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243578, "uuid": "4f4e2101-398b-481e-a50c-e2bb9c3c5d21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be294bdd-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777243580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243580, "uuid": "37db79b4-27eb-4b26-b10f-338553f33a5f", "comment": "Malware payload (Mirai)", "value": "9b5451a2cbcf8da1bb5f4d1fa018898b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243580, "uuid": "e1f2edc3-c0cb-4034-a3d4-4d054526c8b8", "comment": "Malware payload (Mirai)", "value": "aa4d2cdb81d2d32f983a8894e03cd1c8f2e195ea76f96597eb6488d07f8d63f1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243580, "uuid": "018adef0-692b-40ee-82c0-9d1108ad345a", "value": "T1A2432921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243580, "uuid": "2d3c634e-a74a-4068-8171-f498200a2ab9", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFITQKqgESnmC/xO+KpAwg:RqtmZPuutfbltZFBSJsBcfDSTFIdBEg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777243580, "uuid": "7b996d28-333e-4590-82ac-06667f6d390d", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243580, "uuid": "79b98bf7-a67f-4d30-b325-01a842ddc80f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be38e670-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777243580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243580, "uuid": "087e2d39-4e49-4f03-93dc-6dbf80cf0594", "comment": "Malware payload (Mirai)", "value": "380c1a0da340b8c2aa6002616fcf7310", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243580, "uuid": "5d87e49f-6214-44b2-9af2-0489058e0735", "comment": "Malware payload (Mirai)", "value": "9ed3618c4052bc9ef98e120e2da6e98e941089e4eaaa11a3575c3a6381d6e83e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243580, "uuid": "0cfe7d1d-d2af-4d6a-902f-568cdac048e1", "value": "T19EB2B03C6F040AEDC94BC17906A947203A711B716583EC4B7266EE972F5F46CB8C36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243580, "uuid": "56653e2f-b35a-4c65-8c0a-bc11eb79061a", "value": "384:oeD8ZSH2LLZUYyGZbsOiTnZ7/2DJIvOQd97Pg04yVWLRz3md9JgGlzDpH7uNj1JE:oeD8ZSWvZHZbs1ZYIvOyVgCeR3i9JgGh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777243580, "uuid": "97c62c0a-3df3-4f1f-b426-506839f27234", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243580, "uuid": "12d8b030-9e07-4544-a627-7dbb6bb1a111", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be3f5911-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777243580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243580, "uuid": "e6deb504-2bcc-4744-9d62-47e759dd1a4e", "comment": "Malware payload (Mirai)", "value": "6f0186c08c71fa87d1269024d571d1ee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243580, "uuid": "cfe0d955-f204-453c-9291-fc56ce76c082", "comment": "Malware payload (Mirai)", "value": "51ded53ada4aa9512fbd980e2e8f963a747e36c0e882dacb0919ee42c47f13c1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243580, "uuid": "168fb69f-5d22-483a-95e8-e9e3232dad2a", "value": "T17523F2304227DEACCE7024BCDA9C8783B0E19977F2ABB612512546BC3E915475B7EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243580, "uuid": "bae13527-00fa-46bf-bd5c-cde9c07c6791", "value": "768:a/TYCoIxdEzIvb+ufzLRXCHrbJZpR5K03NG3c9q3UELbUXfi6nVMQHI4vcGpvR:aECFUdwRSnJZv0eOLRQZR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777243580, "uuid": "f7205e53-b891-4705-b3de-7091a12acf96", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243580, "uuid": "861a1792-fd43-4e60-b0fe-fa844d355ab9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be4562c0-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777243580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243580, "uuid": "b44aba85-f26c-4e58-81da-e24884dedffb", "comment": "Malware payload (Mirai)", "value": "f4e299d1b180979228826f4f33af0d57", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243580, "uuid": "c995fd4f-3735-4267-b88d-c1892ca75257", "comment": "Malware payload (Mirai)", "value": "5448763c8ac93e6b807ac41778796a45a56ff872c65e37ac1f12590f5a14afd0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243580, "uuid": "d41b947a-bfa1-43fe-a878-c49afb659f71", "value": "T17B336C36E029DED0C6560134A4E88F751F03F1C883536EBB2AE546B2645396CFA19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243580, "uuid": "46ea37c0-74e5-4492-83c8-9293edb9f80a", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9dm3CZQoV/bnmCozw:Oa4U7G7SvT6ftBQm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777243580, "uuid": "e99f6a95-de64-43b4-9caf-28c59578caa2", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243580, "uuid": "12758b87-8f03-4657-b8a1-2371b8a041d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be5b68b7-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777243580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243580, "uuid": "16893996-b4ac-4198-94fb-790b0bd42a66", "comment": "Malware payload (Mirai)", "value": "3350de03336124727621095d9dd53ef1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243580, "uuid": "e8329c1c-fccd-4eb6-a56d-8b09a79c3518", "comment": "Malware payload (Mirai)", "value": "1dfca3774ddeb0ae37a15306cddbb71db78188645057a02d2bf54c38490affd6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243580, "uuid": "189efb9f-3d00-4be8-8d10-de7a1dcd4a3a", "value": "T185B39CDBF24701A0C8624AF007CB4BED3E2723815F27C5E76C6A657968791CF8906F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243580, "uuid": "7827eeda-314b-4784-b7d8-a47fc15dd78a", "value": "1536:0u27gBY9FSSpj3z5Qxw6YaWWgg1L/LWy:19sSyzz36YaWWgg1Lq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777243580, "uuid": "9ecae0e6-0733-4333-8308-55b2bde2e573", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243580, "uuid": "c47e861b-e17e-4b7c-b514-67429a3ff6dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfda4d20-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777243582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243582, "uuid": "743f76c6-0452-4a41-ac59-ec7eed4263d6", "comment": "Malware payload (Mirai)", "value": "a4222724bc76fac74add24862d71965c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243582, "uuid": "97f95d84-3fd3-4acf-9f71-b3b0c6b9f09d", "comment": "Malware payload (Mirai)", "value": "fee25ba3579b250a0af55ce389c029d339c99e212bdc34ac19e96d1573a409a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243582, "uuid": "fb99c01e-17ce-4c40-bfed-f59214763aaf", "value": "T105A2C018C3C86FF4EEAE5A34AD92D1D13BB58E9732D6E8B365DE5B112502007B349D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243582, "uuid": "6c07f6dd-8d3e-4470-aae8-a66e6c8aaeb0", "value": "384:9/JywWc84Tp2YshxqlDqK6Y4+Bq6qoP7nO3Ynaf2ayM4uVcqgw05VxJG:9RxsSVsMDhX/BxqoP7Weaf2ap4uVcqg0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777243582, "uuid": "07a7c7ea-5c72-47c4-9955-236243be5cb7", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243582, "uuid": "a2271989-bbda-415f-b7f5-7bf8a7ce188a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfdd76f5-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777243582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243582, "uuid": "46b12da7-8f76-41f2-bd6f-51280dfce7a3", "comment": "Malware payload (Mirai)", "value": "bda63ab75863767a307e7aeb191acc49", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243582, "uuid": "0c7403ea-8745-41ae-b08d-a4ac574cbd15", "comment": "Malware payload (Mirai)", "value": "16ba1c828690746ecfc497b7e0e4264651fbea3d343e0e760a2ede577e1a9289", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243582, "uuid": "8857184f-58b2-4d76-ab5f-992cec3bcb2b", "value": "T18333FA8EB8029D3CF91BE6BE54164E0DB93177C152830B2767BBFDA36C721945E02E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243582, "uuid": "47e35ba4-1e3b-4604-81f9-3fb882448009", "value": "768:gduPBFnHooqR8qOCKq2tH4Kg9e+TK806MMUVjzkfQXObHud2oGg:r/hqaJxDg9eqK806MHdkfQX6HuCg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777243582, "uuid": "e3bc960a-2d08-4dda-ba47-6aee63261243", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243582, "uuid": "42bfbdb9-9161-417f-b4df-d74584ed6101", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b11f0232-41c2-11f1-bc00-82aee05be84a", "comment": "Malware payload (AdaptixC2)", "timestamp": 1777243987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243987, "uuid": "aa24cbf0-25df-415e-a4e8-ef30d33565a0", "comment": "Malware payload (AdaptixC2)", "value": "3965675d56c592155902ecf8b9471bae", "object_relation": "md5", "Tag": [ { "name": "AdaptixC2", "colour": "#BD7352", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243987, "uuid": "b9657785-e1ea-4fee-957e-e636b13fd5d4", "comment": "Malware payload (AdaptixC2)", "value": "d3e257a5af3b9a5fd8c12f3c27a83aac286b29871d93e92d20294a5a216921fb", "object_relation": "sha256", "Tag": [ { "name": "AdaptixC2", "colour": "#BD7352", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243987, "uuid": "5be64805-4bbf-433e-8b47-e0cb29937cf0", "value": "T19BA35336E7B3C4ADC05EC638AB87A4B3B9F07C5C463475194781A6213B5BD386BBE1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243987, "uuid": "abc70282-c6ea-4b9a-b257-12abd00859d7", "value": "dcd18b007801c54d7da87f856c9f3cc9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243987, "uuid": "8e1dbb37-58e0-4e61-ba97-eb25b26c5a64", "value": "1536:JZUVdjqgGBF28EtwP1z8wxDJN8GusNfUUVb5TofqSHKvSK8685t+S+k9cY2PdaaR:Qmpz9fMfUK+k3i6kEEn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777243987, "uuid": "8888a2c5-35e3-4599-993a-7f6df8b94caa", "value": 105472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243987, "uuid": "9d2126b1-e723-43d0-826b-b3529a19504b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777161672, "uuid": "095ad6c7-4103-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/aiermass/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777161672, "uuid": "09c15fa2-4103-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.237.48.240:53906/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777161727, "uuid": "2a819350-4103-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.105.203:38728/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777161734, "uuid": "2e7d604d-4103-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://enfa1p13.mivonex-serv.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777161853, "uuid": "75335c42-4103-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.231.177:48699/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777161855, "uuid": "767150ee-4103-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.92.189:37787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777162211, "uuid": "4ac688b1-4104-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://etaknqgp.mivonex-serv.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777162332, "uuid": "92f65096-4104-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://manngua.mivonex-serv.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777162521, "uuid": "0371a2dd-4105-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.92.189:37787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777162643, "uuid": "4c60b10b-4105-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.37.132:49908/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777163003, "uuid": "22e1a4a4-4106-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.248.178:52559/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777163050, "uuid": "3ece8008-4106-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fleuytfp.dexon-node.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777163057, "uuid": "42d914f7-4106-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.25.83:59989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777163827, "uuid": "0dcd4889-4108-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mens-tu.dexon-node.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777164129, "uuid": "c1e4856f-4108-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fore-k6mz.dexon-node.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777164257, "uuid": "0e8071cb-4109-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.159/arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777164258, "uuid": "0f197c87-4109-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.161.149:34889/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777164263, "uuid": "118e4ed2-4109-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.159/tplink.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777164314, "uuid": "301a225e-4109-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.159/arm4", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777164374, "uuid": "5412b41d-4109-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.159/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777164374, "uuid": "5412d962-4109-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.159/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777164374, "uuid": "54162ca9-4109-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.159/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777164434, "uuid": "7796837b-4109-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.35.126.149:36975/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777164559, "uuid": "c204c1dc-4109-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.234.2:39396/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777164728, "uuid": "273aaca2-410a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://poditt0j.dexon-node.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777164981, "uuid": "bd8cea97-410a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.103.41.62/bot.arm", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777165027, "uuid": "d90b74d7-410a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://estrqmi.dexon-node.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777165390, "uuid": "b19daa19-410b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lichxz.dexon-node.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777165747, "uuid": "867bd4f7-410c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://terr-53p.bexlor-net.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777165938, "uuid": "f876ec52-410c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.35.126.149:36975/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777165939, "uuid": "f8e4b8ec-410c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.248.71:51435/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777166047, "uuid": "39309ecf-410d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://plag59o.bexlor-net.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777166347, "uuid": "ec1bda9d-410d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://day-g6qh.bexlor-net.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777166359, "uuid": "f30a0787-410d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.0.39:50922/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777166527, "uuid": "575b7f9e-410e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.234.76:50330/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777167017, "uuid": "7b4d74fe-410f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.84.23:50581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777167069, "uuid": "9a7aa72d-410f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://treexw.bexlor-net.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777167155, "uuid": "cdbd9aa8-410f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.225.49.44:54822/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777167428, "uuid": "708c3e71-4110-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.148.229.86:43983/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777167548, "uuid": "b7d76945-4110-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fine7t.bexlor-net.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777167790, "uuid": "47fca3ed-4111-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pieqt.bexlor-net.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777167912, "uuid": "90be0e2b-4111-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.84.23:50581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777168149, "uuid": "1e2d0b59-4112-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trab-7t.qivon-store.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777168153, "uuid": "202c133b-4112-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.248.71:51435/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777168447, "uuid": "cf952aa5-4112-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://koerhl.qivon-store.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777168462, "uuid": "d8eecf7b-4112-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.225.49.44:54822/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777168760, "uuid": "8a071e59-4113-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.214.178:47741/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777168811, "uuid": "a8c5c67d-4113-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ami-mfs.qivon-store.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777168927, "uuid": "ee0f8fac-4113-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.148.229.86:43983/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777169287, "uuid": "c41d9910-4114-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kopf-wkeu.qivon-store.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777169419, "uuid": "1333835d-4115-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.45.96:50832/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777169526, "uuid": "52bdae20-4115-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.95.184:42374/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777169526, "uuid": "52f479f6-4115-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.156.166:52113/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777169526, "uuid": "52f60d46-4115-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.156.166:52113/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777169586, "uuid": "76d12823-4115-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://etoi-fbll.qivon-store.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777169947, "uuid": "4dea96d8-4116-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://filo-8ao.qivon-store.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777170312, "uuid": "279083e9-4117-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soci-84i6.zexon-plus.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777170319, "uuid": "2baf8f90-4117-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.115.191:52881/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777170498, "uuid": "9630141f-4117-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.175.13:53936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777170847, "uuid": "65fc2bad-4118-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fuss-kx01.zexon-plus.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777171087, "uuid": "f5462c52-4118-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://travb7.zexon-plus.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777171327, "uuid": "849b2b5a-4119-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.1.26.13:36849/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777171337, "uuid": "8a5c6b3c-4119-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.108.110:49333/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777171447, "uuid": "cbec1eca-4119-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://piedmg3.zexon-plus.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777171520, "uuid": "f757c4e0-4119-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.171.104:45430/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777171700, "uuid": "62980dd4-411a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.244.238:54927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777171747, "uuid": "7ed99441-411a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ocche0o.zexon-plus.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777171926, "uuid": "e96e08c0-411a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.1.26.13:36849/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777172048, "uuid": "32356d12-411b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://acti-cmf.zexon-plus.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777172120, "uuid": "5cd75a06-411b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.242.181:54229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777172132, "uuid": "63f2891c-411b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.11.143.247:34713/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777172228, "uuid": "9d1e725b-411b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.11.12:47705/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777172299, "uuid": "c7f599b9-411b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.9.170:40666/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777172412, "uuid": "0b38b86c-411c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fire-02k6.raxen-tech.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777172526, "uuid": "4f1ea87f-411c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.105.170:35252/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777172770, "uuid": "e01e1a70-411c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://freur6r.raxen-tech.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777172829, "uuid": "038c2097-411d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.244.238:54927/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777173498, "uuid": "927f3757-411e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.108.110:49333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777173854, "uuid": "6687b6b9-411f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pes-ghj0.raxen-tech.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777174152, "uuid": "17dea037-4120-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://homb-1h.raxen-tech.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777174327, "uuid": "805a49aa-4120-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.11.12:47705/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777174328, "uuid": "80d3f1a8-4120-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.11.27:53368/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777174512, "uuid": "eee949bc-4120-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mati-ns3w.raxen-tech.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777174927, "uuid": "e62a85a3-4121-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ocul-xq7.raxen-tech.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777174999, "uuid": "110cc486-4122-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.220.84:54716/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777175410, "uuid": "05fbb056-4123-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://spia-vo.sylonix-web.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777176069, "uuid": "8f08e37c-4124-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://etab-0d.sylonix-web.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777176193, "uuid": "d8dfb9b2-4124-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.220.84:54716/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777176311, "uuid": "1f47fae9-4125-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://aguarw2y.sylonix-web.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777176676, "uuid": "f8bc31e9-4125-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meer-in.sylonix-web.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777176813, "uuid": "4a359637-4126-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.253.77:51274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777176921, "uuid": "8ac0bec1-4126-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.140.190.123:60327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777177087, "uuid": "eda64603-4126-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.7.248:34529/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777177148, "uuid": "121a2c88-4127-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://amic-po1.sylonix-web.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777177567, "uuid": "0bcf3ab4-4128-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://paniwcfh.sylonix-web.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777177759, "uuid": "7e266dca-4128-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.140.190.123:60327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777177876, "uuid": "c4157d30-4128-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.160.200:35263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777178227, "uuid": "95259e12-4129-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.212.28.129:58266/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777178231, "uuid": "97b32c8d-4129-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stra-j2.noven-sys.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777178420, "uuid": "080f3063-412a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.89.163.22:51003/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777178530, "uuid": "49850c8d-412a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.89.3:51530/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777178531, "uuid": "49f5223d-412a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://landem.noven-sys.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777178720, "uuid": "bb1f635c-412a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.7.248:34529/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777178773, "uuid": "da441dca-412a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.51.200:52422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777178828, "uuid": "fb50dd59-412a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.10.39.242:54463/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777179190, "uuid": "d3430748-412b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lebe6wwf.noven-sys.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777179493, "uuid": "87943b60-412c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mar-jlk.noven-sys.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777179852, "uuid": "5d7e7a65-412d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://homo-ph.noven-sys.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777180027, "uuid": "c6193d76-412d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.218.145:40175/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777180332, "uuid": "7becb39d-412e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://eart-l4.noven-sys.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777180347, "uuid": "8490f418-412e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.33.212:49390/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777180347, "uuid": "84eb5b05-412e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.51.200:52422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777180688, "uuid": "4fe36ea5-412f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://proc-256.mivon-hub.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777180768, "uuid": "7faca3aa-412f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.89.163.22:51003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777181005, "uuid": "0cc89117-4130-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.60.6:49773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777181052, "uuid": "28c8dbb6-4130-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alph-qhj.mivon-hub.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777181470, "uuid": "220b026c-4131-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://homm6uc.mivon-hub.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777181527, "uuid": "43ec1682-4131-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.44.241:35304/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777181950, "uuid": "405abc84-4132-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://casa-zw9e.mivon-hub.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777182199, "uuid": "d4a078c4-4132-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.219.41:48005/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777182616, "uuid": "ccf1bdb6-4133-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cuer-e30q.mivon-hub.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777182971, "uuid": "a09ffdae-4134-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://voxx1.mivon-hub.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777183028, "uuid": "c2c5eab4-4134-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.35.199:41811/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777183224, "uuid": "37c564fc-4135-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.79.137:42873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777183455, "uuid": "c1642eee-4135-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sunhq.dexor-host.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777183877, "uuid": "bca1861d-4136-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fami-wp.dexor-host.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777183928, "uuid": "db213124-4136-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.10.81:39731/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777184121, "uuid": "4e13e509-4137-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.79.47:56010/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777184189, "uuid": "7684d1ab-4137-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.149.107.54:58302/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777184247, "uuid": "9961e511-4137-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.38.166:36079/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777184296, "uuid": "b62cfe9a-4137-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://breagc.dexor-host.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777184527, "uuid": "400c46ac-4138-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.35.199:41811/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777184665, "uuid": "9251336b-4138-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.199.156:33257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777184717, "uuid": "b1227c0d-4138-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mund4c.dexor-host.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777185071, "uuid": "848fcaff-4139-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.79.137:42873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777185373, "uuid": "3816d0ca-413a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://voit-wjw.dexor-host.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777185428, "uuid": "58e8b873-413a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.244.232.184:36815/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777185671, "uuid": "e9b6499e-413a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neroc5j.dexor-host.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777185864, "uuid": "5ce10f2c-413b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.161.194:38359/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777185923, "uuid": "806df31c-413b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.38.166:36079/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777186027, "uuid": "be5b3dc6-413b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.50.80:60620/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777186388, "uuid": "9596803e-413c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ultra-enzyrn.miv6soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777186578, "uuid": "06c8f1bc-413d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.133.162:56860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777186628, "uuid": "248ad0c8-413d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://primeshore.miv6soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777186871, "uuid": "b52eca7b-413d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.161.194:38359/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777187001, "uuid": "02baaac2-413e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynline6os.miv6soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777187650, "uuid": "85c33a03-413f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.7.121:44950/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777187827, "uuid": "ef066e95-413f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.63.184:53578/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777188498, "uuid": "7f15c640-4141-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.2.23:43952/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777188796, "uuid": "30bc4d5c-4142-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.133.162:56860/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777188856, "uuid": "5428f592-4142-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.68.25:38536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777188983, "uuid": "9fda5e67-4142-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.162.179.246:35125/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777189327, "uuid": "6d5690e3-4143-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.99.225:50487/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777189400, "uuid": "987a7feb-4143-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.7.121:44950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777189514, "uuid": "dcb7ba29-4143-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.92.185:51484/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777189628, "uuid": "209a8d2a-4144-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.158.112:43874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777189638, "uuid": "26aeaf53-4144-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.126.49:37671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777189936, "uuid": "d806e949-4144-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.122.240:54576/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777190050, "uuid": "1c5a3f9e-4145-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.44.239:47011/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777190295, "uuid": "adeca0be-4145-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.2.23:43952/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777190300, "uuid": "b1155727-4145-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.250.157:54114/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777190366, "uuid": "d84f29c5-4145-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.167.169.176:59030/Mozi.7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777190528, "uuid": "38fd16eb-4146-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.99.225:50487/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777190597, "uuid": "61e23de5-4146-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.126.49:37671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777190597, "uuid": "61e8bcc2-4146-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.162.179.246:35125/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777190654, "uuid": "846056a1-4146-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.14.100:51147/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777191137, "uuid": "a3c6f599-4147-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.164.128.162:43849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777191382, "uuid": "35c4f5d8-4148-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.156:40884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777191553, "uuid": "9c38a21c-4148-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.44.239:47011/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777191554, "uuid": "9c75e678-4148-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.99.238:43141/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777191670, "uuid": "e17b59f8-4148-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.25.83:59989/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777191670, "uuid": "e1db7dbb-4148-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.16.164.144:36113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777191741, "uuid": "0c0c0c4b-4149-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.108.180:59280/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777192037, "uuid": "bc71cc8b-4149-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.236.44.113:60418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777192277, "uuid": "4b67032e-414a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.14.100:51147/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777192929, "uuid": "cfd82f46-414b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.68:49446/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777192930, "uuid": "d0f9df57-414b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.111.18.139:59736/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777193059, "uuid": "1d5bc572-414c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.81.160:44314/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777193356, "uuid": "cecd1c00-414c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.148.70:60939/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777193479, "uuid": "17a7fab2-414d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.88.89:58590/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777193528, "uuid": "34e4548b-414d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.72:60515/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777193673, "uuid": "8b5f27e7-414d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.1.57:44711/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777193838, "uuid": "edcfc2ed-414d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.55.84:51011/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777194127, "uuid": "99e3341f-414e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.34.102:36508/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777194729, "uuid": "01449ec9-4150-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.53.121.31:54087/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777195029, "uuid": "b40c2520-4150-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.88.89:58590/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777195464, "uuid": "b70574e6-4151-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.111.18.139:59736/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777195464, "uuid": "b72920e4-4151-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.44.193:42095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777195576, "uuid": "f9e84fc1-4151-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.55.84:51011/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777196561, "uuid": "44ee9494-4154-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.184.57:53298/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777196655, "uuid": "7cee13a8-4154-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.231.220:47064/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777196722, "uuid": "a529827a-4154-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.12.231:54760/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777196723, "uuid": "a561807a-4154-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.240.205:56269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777196770, "uuid": "c1b06f34-4154-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.44.193:42095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777196833, "uuid": "e6e9172d-4154-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.14.76:52965/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777196836, "uuid": "e8a6d715-4154-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.183.201:60586/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777197067, "uuid": "727ab76a-4155-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://40l627.miv9soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777197317, "uuid": "0764291f-4156-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.184.57:53298/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777197382, "uuid": "2e82c735-4156-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.55.164:35279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777197440, "uuid": "5117b913-4156-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.220.19:34397/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777197487, "uuid": "6ce7a463-4156-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://otter0-field.miv9soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777197849, "uuid": "448c5427-4157-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://g4th-sheet.miv9soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777198031, "uuid": "b16d849e-4157-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.231.220:47064/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777198512, "uuid": "cfa17cb9-4158-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fre5h-logic.miv9soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777198701, "uuid": "403d4e9b-4159-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.220.19:34397/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777198816, "uuid": "853c5f8f-4159-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.55.164:35279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777198819, "uuid": "86a8e7c7-4159-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.143.46:57984/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777198991, "uuid": "ed19bad6-4159-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bin4ry-trail.miv9soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199122, "uuid": "3bb1ebac-415a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.79.170:34209/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199176, "uuid": "5b6f42aa-415a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://st4ge-pulse.dex4lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199293, "uuid": "a16c9803-415a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.219.120:53137/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199528, "uuid": "2d3dc105-415b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jloj7ws.dex4lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199535, "uuid": "31881f95-415b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.55.146:56956/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199777, "uuid": "c1c20039-415b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.47/gamesdior/main_ppc", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199777, "uuid": "c1caad9c-415b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.47/gamesdior/main_x86_64", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "c32ef56d-415b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.47/gamesdior/main_arm7", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "c3341e44-415b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.47/gamesdior/main_x86", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "c337ab0e-415b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.47/gamesdior/main_arm5", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "c33bf47a-415b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.47/gamesdior/main_spc", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "c33fe732-415b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.47/gamesdior/main_mpsl", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "c340065b-415b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.47/gamesdior/main_arm6", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "c341de98-415b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.47/gamesdior/main_mips", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "c34216a5-415b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.47/gamesdior/main_m68k", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "c3431162-415b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.47/gamesdior/main_arm", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199779, "uuid": "c349d648-415b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.47/gamesdior/main_sh4", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199780, "uuid": "c378dcfc-415b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.47/lilin.sh", "Tag": [ { "name": "176-65-139-47", "colour": "#822635", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199827, "uuid": "dfa3f5e8-415b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.46/sys_x86_64", "Tag": [ { "name": "176-65-139-46", "colour": "#96a663", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199895, "uuid": "0866af82-415c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.218.170:55837/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199950, "uuid": "28e14e53-415c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://loadtin.dex4lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777199950, "uuid": "28ee816f-415c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.232.75.25:46943/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200073, "uuid": "7278ac3a-415c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/arc", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200073, "uuid": "7278fecb-415c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/arm6", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200074, "uuid": "72f35d9c-415c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.51.120:47545/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200074, "uuid": "731dfeec-415c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.188.71:54439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200133, "uuid": "95cc7172-415c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/arm5", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200133, "uuid": "95ce53c9-415c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/arm4", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200199, "uuid": "bd658fca-415c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/arm7", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200261, "uuid": "e26e1bd8-415c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/i686", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200261, "uuid": "e277e9e2-415c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/i486", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200310, "uuid": "ff87fb6e-415c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bajbvqgz.dex4lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "0592b48d-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/sh4", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "059360e7-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/ppc", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "05985536-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/test.sh", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "059870cc-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/x86_64", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "059e89f0-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/x86", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "059e8ffa-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/mpsl", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "05a4108a-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/mips", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "05a693d8-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/spc", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200320, "uuid": "05aaae0b-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/m68k", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200370, "uuid": "233489e3-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.220.145:60168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200428, "uuid": "461410ea-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.43.198:38849/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200487, "uuid": "690234e3-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://empty-violet-63e1.maskify.workers.dev/earnify-client-armv7-linux-androideabi", "Tag": [ { "name": "earnify", "colour": "#d9020d", "exportable": true, "hide_tag": false }, { "name": "maskify", "colour": "#333758", "exportable": true, "hide_tag": false }, { "name": "proxy-sdk", "colour": "#f31b08", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200490, "uuid": "6ac499e7-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://empty-violet-63e1.maskify.workers.dev/earnify-client-x86_64-linux-android", "Tag": [ { "name": "earnify", "colour": "#d9020d", "exportable": true, "hide_tag": false }, { "name": "maskify", "colour": "#333758", "exportable": true, "hide_tag": false }, { "name": "proxy-sdk", "colour": "#f31b08", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200490, "uuid": "6aea0015-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://empty-violet-63e1.maskify.workers.dev/earnify-client-aarch64-linux-android", "Tag": [ { "name": "earnify", "colour": "#d9020d", "exportable": true, "hide_tag": false }, { "name": "maskify", "colour": "#333758", "exportable": true, "hide_tag": false }, { "name": "proxy-sdk", "colour": "#f31b08", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200607, "uuid": "b0d48f80-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/arm6", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "b7a5cc23-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/arm5", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "b7b68a62-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/x86", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "b7b68af4-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/x86_64", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "b7bca3c6-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/mips", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "b7c1b676-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/mpsl", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "b7d7f349-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/arm7", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200619, "uuid": "b7fdc5b3-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/bins.sh", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200620, "uuid": "b86be552-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/arm4", "Tag": [ { "name": "156-229-165-225", "colour": "#25ccca", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200731, "uuid": "fa486d27-415d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vaultink.dex4lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200861, "uuid": "47f07239-415e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.220.145:60168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777200861, "uuid": "481f36db-415e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.1.86:50677/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777201093, "uuid": "d26f59a9-415e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talnexos5.dex4lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777201158, "uuid": "f8bd2769-415e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.220.135.39:51282/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777201164, "uuid": "fc43980d-415e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://gamecheap.store/gamesdior/main_mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777201168, "uuid": "ff0aa192-415e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://gamecheap.store/gamesdior/main_x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777201168, "uuid": "ff1221b2-415e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://gamecheap.store/gamesdior/main_arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777201168, "uuid": "ff126487-415e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://gamecheap.store/gamesdior/main_mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777201168, "uuid": "ff158bfb-415e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://gamecheap.store/gamesdior/main_spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777201168, "uuid": "ff15a481-415e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://gamecheap.store/gamesdior/main_ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777201168, "uuid": "ff15f202-415e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://gamecheap.store/gamesdior/main_arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777201168, "uuid": "ff1c60c6-415e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://gamecheap.store/gamesdior/main_arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777201168, "uuid": "ff1c8f47-415e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://gamecheap.store/gamesdior/main_x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777201168, "uuid": "ff2288af-415e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://gamecheap.store/gamesdior/main_m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777201179, "uuid": "057c2cad-415f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://gamecheap.store/gamesdior/main_arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202048, "uuid": "0bb3b6fd-4161-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.43.198:38849/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202054, "uuid": "0f25885a-4161-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://parcelquick.bexla3rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202055, "uuid": "0f746b63-4161-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solflux6ix.bexla3rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202058, "uuid": "1147ebb9-4161-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://68.185.152.86:45230/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202058, "uuid": "1152b57b-4161-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.232.75.25:46943/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202058, "uuid": "11634ef0-4161-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.55.146:56956/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202059, "uuid": "11cabf64-4161-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.136.98.126:52422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202059, "uuid": "123a2075-4161-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.58.204:45685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202069, "uuid": "182b8812-4161-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://gamecheap.store/ohshit.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202071, "uuid": "193ac5cb-4161-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://gamecheap.store/gamesdior/main_sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202071, "uuid": "19458651-4161-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.79.170:34209/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202073, "uuid": "1a7d9197-4161-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://gamecheap.store/lilin.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gamecheap-store", "colour": "#bef011", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202227, "uuid": "76269883-4161-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.132.232:56927/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202236, "uuid": "7bbd9867-4161-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.119.166.69:50062/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202413, "uuid": "e53a40c2-4161-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sub-h11l.bexla3rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202527, "uuid": "28ca0d3e-4162-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.198.193:33759/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202717, "uuid": "9a3a4574-4162-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://echogate.bexla3rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202726, "uuid": "9fb620e6-4162-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.220.135.39:51282/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777202783, "uuid": "c1b0aede-4162-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.236.78:52026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203130, "uuid": "90ab8c19-4163-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://calm-spool.bexla3rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203131, "uuid": "90b0a5d0-4163-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.114.227.72:37553/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203248, "uuid": "d67d3103-4163-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/oPvjr94jfe/Plugins/cred.dll", "Tag": [ { "name": "91-92-242-236", "colour": "#ce3199", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203309, "uuid": "fb5cac5b-4163-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/oPvjr94jfe/Plugins/cred64.dll", "Tag": [ { "name": "91-92-242-236", "colour": "#ce3199", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203328, "uuid": "062695c9-4164-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.58.204:45685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203344, "uuid": "0fba0029-4164-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.114.227.72:37553/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203549, "uuid": "8a018ab7-4164-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vorline5is.bexla3rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203623, "uuid": "b6357d7a-4164-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.119.166.69:50062/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203742, "uuid": "fd192b57-4164-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.170.255:53437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203854, "uuid": "3fa97d44-4165-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://beautiful-roentgen.176-65-139-130.plesk.page/mirai.arm7", "Tag": [ { "name": "beautiful-roentgen-176-65-139-130-plesk-page", "colour": "#3b69e1", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203856, "uuid": "4112d981-4165-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.176-65-139-130.plesk.page/mirai.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-176-65-139-130-plesk-page", "colour": "#9a8a8d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203856, "uuid": "411b856c-4165-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.176-65-139-130.plesk.page/mirai.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-176-65-139-130-plesk-page", "colour": "#9a8a8d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203868, "uuid": "482bf03d-4165-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://beautiful-roentgen.176-65-139-130.plesk.page/mirai.mips", "Tag": [ { "name": "beautiful-roentgen-176-65-139-130-plesk-page", "colour": "#3b69e1", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203922, "uuid": "68bcf8c9-4165-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.236.78:52026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777203973, "uuid": "86d0bab6-4165-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5pruc7-mount.qiv7moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777204224, "uuid": "1c29eee9-4166-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.30.145.245:33836/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777204327, "uuid": "5a0564ba-4166-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.219.41:48005/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777204334, "uuid": "5e03c6ad-4166-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://compressout.qiv7moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777204628, "uuid": "0d0bd9b9-4167-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.197.147:40588/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777204632, "uuid": "0fe7cf2a-4167-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.58.190.87:56557/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777204756, "uuid": "59cc46c4-4167-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://39hwegfg.qiv7moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777205006, "uuid": "eeb8df7d-4167-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.170.255:53437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777205109, "uuid": "2bd2c1ff-4168-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sthj.qiv7moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777205118, "uuid": "312d457a-4168-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.113.127:60362/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777205527, "uuid": "251ad7c3-4169-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.188.71:54439/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777205593, "uuid": "4c419a3d-4169-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5ob0.qiv7moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777205842, "uuid": "e0c402ff-4169-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.151.175:49147/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777205957, "uuid": "2539e80f-416a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zenmesh9en.qiv7moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777206077, "uuid": "6d2f8c5d-416a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.255.251.91:51769/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777206381, "uuid": "2208378f-416b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.216.164:39355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777206432, "uuid": "40cc8ff2-416b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lum-lineon.zex2liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777206617, "uuid": "aef32604-416b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.212/tvt", "Tag": [ { "name": "176-65-148-212", "colour": "#9f1044", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777207099, "uuid": "ce0f7f78-416c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.106.231.163:48147/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777207210, "uuid": "106673eb-416d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alphsummer.zex2liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777207393, "uuid": "7d0953f5-416d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://studi-fores.zex2liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777207629, "uuid": "0a0dd52f-416e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.24.165:59393/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777207811, "uuid": "764a1188-416e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://3vnp4.zex2liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777207927, "uuid": "bb61a524-416e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.24.165:59393/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777207998, "uuid": "e61b8a59-416e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.62.202:47199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777208046, "uuid": "02a730dc-416f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.26.192.44/iciv36xx0z", "Tag": [ { "name": "194-26-192-44", "colour": "#de847f", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777208180, "uuid": "5275ed4f-416f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vocalatomic.zex2liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777208227, "uuid": "6e786616-416f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.118.216:37127/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777208347, "uuid": "b5c21bba-416f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://176.65.132.139/bin/support.client.exe", "Tag": [ { "name": "176-65-132-139", "colour": "#89b7e2", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777208529, "uuid": "2270046f-4170-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gr1m-index.zex2liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209016, "uuid": "447e010e-4171-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkmesh7al.rax8pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209308, "uuid": "f29bb8ec-4171-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.197/sh", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209313, "uuid": "f5afe8b4-4171-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.197/cat.sh", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209314, "uuid": "f683e965-4171-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.197/iran.sparc", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209319, "uuid": "f93cfbfb-4171-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.197/iran.i486", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209319, "uuid": "f93d0aa4-4171-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.197/iran.x86_64", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209324, "uuid": "fc89f00f-4171-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.197/iran.sh4", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209325, "uuid": "fcded579-4171-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.197/iran.armv4l", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209325, "uuid": "fd16cf3a-4171-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.197/iran.armv5l", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209326, "uuid": "fd5336cb-4171-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.197/iran.powerpc", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209326, "uuid": "fd5353ef-4171-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.197/iran.armv7l", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209327, "uuid": "fe59b898-4171-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.197/iran.armv6l", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209328, "uuid": "fe68c576-4171-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.197/iran.m68k", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209328, "uuid": "fe6ae9a9-4171-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.197/iran.arc", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209329, "uuid": "ff134e61-4171-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.197/iran.mipsel", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209329, "uuid": "ff332d48-4171-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.197/iran.mips", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209334, "uuid": "0244e86e-4172-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.197/iran.mipsrouter", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209335, "uuid": "02d610ca-4172-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.197/iran.aarch64", "Tag": [ { "name": "176-65-132-197", "colour": "#a89e62", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209373, "uuid": "195efb75-4172-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cargoquery.rax8pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209439, "uuid": "411b3d33-4172-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.62.202:47199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209558, "uuid": "87f3d60a-4172-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.224.139:33604/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209683, "uuid": "d23f8b03-4172-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.160/init.sh", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209684, "uuid": "d2e25eae-4172-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.160/bins/redis-proxyd", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209684, "uuid": "d2eb6cf4-4172-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.160/bins/redis-buildxd", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209684, "uuid": "d2ec3548-4172-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.160/bins/redis-scand", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209684, "uuid": "d2eedc60-4172-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.160/redis-daemon", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209684, "uuid": "d2f7e082-4172-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.160/bins/redis-runcd", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209732, "uuid": "ef7594ba-4172-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://glolab.rax8pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209739, "uuid": "f3c73d47-4172-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.160/bins/redis-initd", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209739, "uuid": "f3d3f79c-4172-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.160/bins/redis-conteinerd-shim", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209739, "uuid": "f3dae6b7-4172-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.160/bins/redis-sbomd", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209739, "uuid": "f3db1c52-4172-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.160/bins/redis-daemon", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209739, "uuid": "f3ddf179-4172-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.160/bins/redis-conteinerd", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777209978, "uuid": "81fac8c1-4173-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.224.139:33604/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777210026, "uuid": "9ec0884c-4173-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.96.219:54525/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777210095, "uuid": "c7a5c5ee-4173-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.89.79:42608/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777210147, "uuid": "e7205e7c-4173-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.137.96:60807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777210208, "uuid": "0b36c544-4174-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tigmjuy.rax8pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777210224, "uuid": "14995906-4174-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.208.145.20:33976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777210580, "uuid": "e8fe4d8a-4174-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.236.184:39448/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777210630, "uuid": "06956a91-4175-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zenmeshix1.rax8pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777210871, "uuid": "9650f21a-4175-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.231.177:48699/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777211172, "uuid": "49a8c7f4-4176-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ion-cra.rax8pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777211181, "uuid": "4f04fa2f-4176-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.137.96:60807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777211528, "uuid": "1dca9098-4177-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://peak7-frame.sylo1mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777211777, "uuid": "b2617b7c-4177-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.110.57:36761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777211889, "uuid": "f51e3b42-4177-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zentideor.sylo1mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212124, "uuid": "817a4265-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/x86", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212125, "uuid": "81a76e4b-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/zyxel.sh", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212128, "uuid": "83617da3-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.38:43023/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212128, "uuid": "837b20c4-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.195.93:42238/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212128, "uuid": "837de400-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.38:43023/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212128, "uuid": "83985a11-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.214.178:47741/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212128, "uuid": "83c9250f-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.228.167:47438/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212128, "uuid": "83e4d27e-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.80.82.101:53795/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212129, "uuid": "83f17f3a-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.33.178:44410/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212129, "uuid": "83fbc1d5-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.145.138:50494/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212129, "uuid": "8409c7bb-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.45.152:48610/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212129, "uuid": "842780bd-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.198.206:51925/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212130, "uuid": "849486ab-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.108.190.219:38059/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212131, "uuid": "85246717-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.95.26:36634/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212140, "uuid": "8a7adfef-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.135.172.47:44212/Mozi.a", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212140, "uuid": "8af1016a-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.30.117.248:52528/Mozi.m", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212147, "uuid": "8ea87aa5-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://static-host119-30-117-248.link.net.pk/Mozi.m", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212190, "uuid": "a871ea3d-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.71.40:46769/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212190, "uuid": "a89143b9-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.173.89.126:52537/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212190, "uuid": "a8a69229-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.136.98.126:52422/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212190, "uuid": "a8a8d548-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.189.92:58009/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212190, "uuid": "a8c101be-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.80.82.101:53795/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212190, "uuid": "a8c2b081-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.196.250:55247/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212190, "uuid": "a8c2cd1f-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.28.183:57160/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212190, "uuid": "a8c88867-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.84.219.118:37931/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212190, "uuid": "a8d81d96-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.49.161:45371/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212190, "uuid": "a8d95871-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.105.248:51446/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212191, "uuid": "a8f17d0d-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.27.110:38224/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212191, "uuid": "a904328c-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.78.242:55160/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212191, "uuid": "a914c369-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.253.80.3:48921/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212191, "uuid": "a937e4ec-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.157.42:48039/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212191, "uuid": "a941f8e6-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.11.204:60425/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212191, "uuid": "a95256dd-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.229.69:39320/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212191, "uuid": "a9546da3-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.32.13:57584/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212191, "uuid": "a95c22a7-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.216.182.208:45485/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212191, "uuid": "a9637124-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.30.87:34637/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212201, "uuid": "aed2e3f5-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.183.5:48771/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212251, "uuid": "ccaa4cc0-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.32.13:57584/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212251, "uuid": "ccaab8cc-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.229.69:39320/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212251, "uuid": "ccb3403f-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.145.138:50494/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212251, "uuid": "ccb3bcbe-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.1.57:44711/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212251, "uuid": "ccbe4097-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.175.13:53936/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212251, "uuid": "ccc4565c-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.234:41490/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212251, "uuid": "ccc9ac68-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.189.92:58009/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212251, "uuid": "ccc9bea0-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.25:37443/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212251, "uuid": "ccd35f02-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.213.140.201:60251/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212251, "uuid": "ccd362bc-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.199.139:41263/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212251, "uuid": "cce882d8-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.81.6.145:60572/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212251, "uuid": "ccfd526d-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.185.201:51331/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212251, "uuid": "cd17a719-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.246.99:55750/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212251, "uuid": "cd326c92-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.100.236:48665/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212252, "uuid": "cd3d6fa9-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.90.242:37706/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212252, "uuid": "cd4b7657-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.90.242:37706/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212252, "uuid": "cd8dd340-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.69.89:46078/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212256, "uuid": "cfe2cd0e-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.69.89:46078/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212258, "uuid": "d0de721e-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.98.87:36204/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212260, "uuid": "d2038dcc-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.3.23.156:34909/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212261, "uuid": "d328654a-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.86.125:51859/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212312, "uuid": "f108003d-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.216.182.208:45485/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212312, "uuid": "f1081ff3-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.78.242:55160/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212312, "uuid": "f108b17e-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.79.47:56010/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212312, "uuid": "f1169b54-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.6.91.47:53338/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212312, "uuid": "f11ad4ae-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.171.177.193:32935/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212312, "uuid": "f1295e04-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.120.17:47456/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212312, "uuid": "f13b66b6-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.27.110:38224/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212312, "uuid": "f13b8859-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.198.85:42435/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212312, "uuid": "f1497ed9-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.167.107.251:51865/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212312, "uuid": "f15e0517-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.224.70:39796/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212312, "uuid": "f16b9af0-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.49.34.147:32875/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212312, "uuid": "f16f2c80-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.167.107.251:51865/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212312, "uuid": "f1703165-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.83.18:52767/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212312, "uuid": "f18e25ec-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.164.253.1:57439/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212313, "uuid": "f1955acf-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.14.130:49273/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212313, "uuid": "f195634c-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.83.18:52767/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212313, "uuid": "f1a8cbb9-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.81.174:53457/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212320, "uuid": "f5dc3022-4178-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://loose-bun.sylo1mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212368, "uuid": "12c47057-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.79.160.210:34358/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212368, "uuid": "12d11c1a-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.163.187.69:57456/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212369, "uuid": "12fcdac1-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.95.26:36634/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212369, "uuid": "1307d27a-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.81.174:53457/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212369, "uuid": "130cc3c0-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.157.42:48039/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212369, "uuid": "1310b9b9-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.93.95.46:60983/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212369, "uuid": "131655ec-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.228.167:47438/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212369, "uuid": "1316bfaa-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.88.198:51945/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212369, "uuid": "131db601-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.196.250:55247/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212369, "uuid": "1320426f-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.92.185:51484/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212369, "uuid": "13296ee3-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.11.143.247:34713/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212369, "uuid": "132fbb7b-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.116.148.48:46412/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212369, "uuid": "13417571-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.28.223:51070/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212369, "uuid": "13801f56-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.11.57:33814/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212370, "uuid": "139d8f6c-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.20.102:52257/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212370, "uuid": "13a6e324-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.68.84:51695/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212428, "uuid": "367caf87-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.106.241.72:47350/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212428, "uuid": "369f9366-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.86.125:51859/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212428, "uuid": "36b64a8d-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:42693/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212429, "uuid": "36bff43b-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.224.70:39796/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212429, "uuid": "36cd4394-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.49.34.147:32875/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212429, "uuid": "37308760-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.175.195:36566/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212429, "uuid": "3737e587-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.57.50:34153/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212429, "uuid": "3746ff92-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.231.182:57649/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212434, "uuid": "3a2955d9-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.92.24:45008/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212442, "uuid": "3ed4c6e7-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.96.219:54525/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212733, "uuid": "ec4c66d5-4179-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://r4vxeem.sylo1mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777212857, "uuid": "3642ff4f-417a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.247.164:49192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777213155, "uuid": "e7f9680a-417a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.170.165:44576/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777213209, "uuid": "07a2a602-417b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qkkrhea.sylo1mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777213214, "uuid": "0b0c69a6-417b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.170.165:44576/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777213329, "uuid": "4f2a9358-417b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.58.190.87:56557/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777213633, "uuid": "04ba8e26-417c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.236.74.65:43488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777213687, "uuid": "24eaf17f-417c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://192.109.200.12/bin/support.client.exe", "Tag": [ { "name": "192-109-200-12", "colour": "#dac1a5", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777213687, "uuid": "24ed2b19-417c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://192.109.200.131/bin/support.client.exe", "Tag": [ { "name": "192-109-200-131", "colour": "#2031b2", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777213869, "uuid": "915f279a-417c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ridgegentle.sylo1mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777213943, "uuid": "bd883d53-417c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.236.184:39448/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214053, "uuid": "fed4ba6d-417c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sandbhar.to6varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214115, "uuid": "23a935c0-417d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://68.185.152.86:45230/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214226, "uuid": "666120f4-417d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.158.112:43874/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214287, "uuid": "8a9652aa-417d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.248/x", "Tag": [ { "name": "204-76-203-248", "colour": "#638c90", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214288, "uuid": "8af4f07f-417d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.195/bj", "Tag": [ { "name": "204-76-203-195", "colour": "#d42294", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214292, "uuid": "8db3fea2-417d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.9/svc.exe", "Tag": [ { "name": "192-109-200-9", "colour": "#23acf3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214356, "uuid": "b3c33a0c-417d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.195/xx.sh", "Tag": [ { "name": "204-76-203-195", "colour": "#d42294", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214408, "uuid": "d2dd038c-417d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quarrytrav.to6varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214476, "uuid": "fb3fe3e8-417d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.247.164:49192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214597, "uuid": "430c6691-417e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.68.25:38536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214647, "uuid": "60f1fbd6-417e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/js/assets/xdf.x64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214647, "uuid": "60f7f308-417e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/js/assets/xdf.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214647, "uuid": "60fdde55-417e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/js/assets/xdf.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214648, "uuid": "61c2ea96-417e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/js/assets/xdf.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214648, "uuid": "61c32541-417e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/js/assets/xdf.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214652, "uuid": "63c2e090-417e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/js/assets/xdf.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214652, "uuid": "63e6bfab-417e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/js/assets/xdf.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214652, "uuid": "63e6c25b-417e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/js/assets/xdf.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214652, "uuid": "64422d16-417e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/js/assets/xdf.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214658, "uuid": "679924be-417e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.188.204:47075/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214659, "uuid": "6878acac-417e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/js/assets/xdf.arm4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214663, "uuid": "6aa722d7-417e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/js/assets/xdf.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214712, "uuid": "87b3f9c4-417e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/js/assets/xdf.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "happytugsbakery-com", "colour": "#a02ffb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777214955, "uuid": "18724f47-417f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.236.74.65:43488/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777215069, "uuid": "5c992ba6-417f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://runt11-drive.to6varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777215609, "uuid": "9eb5454e-4180-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://uy2qx.to6varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777215790, "uuid": "0a324491-4181-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://3eums.to6varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777216222, "uuid": "0c029051-4182-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.120.17:47456/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777216388, "uuid": "6e883189-4182-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lightinn.to6varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777216628, "uuid": "fdae6b72-4182-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://exposerv.pav7lorex.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777216928, "uuid": "b08f87e3-4183-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.101.187.22:53636/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777216931, "uuid": "b221807b-4183-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://insivisual.pav7lorex.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777217060, "uuid": "ff0f11c5-4183-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.188.204:47075/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777217411, "uuid": "d0a476cc-4184-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://medi4-spark.pav7lorex.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777217715, "uuid": "85cfad44-4185-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.33.105:44211/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777217768, "uuid": "a50f35de-4185-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rklpwx.pav7lorex.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777217781, "uuid": "ad3f0a53-4185-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.148.70:60939/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777218127, "uuid": "7b8fdf0b-4186-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-rnetr.pav7lorex.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777218140, "uuid": "82fc4e8d-4186-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.131.232:43915/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777218199, "uuid": "a668f89c-4186-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.6.91.47:53338/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777218200, "uuid": "a6f9151c-4186-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.166.51.206:57693/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777218372, "uuid": "0d2169b9-4187-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.165.203:45213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777218489, "uuid": "52da2517-4187-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://norcorear3.pav7lorex.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777218559, "uuid": "7ca5b066-4187-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.232.134:33101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777218680, "uuid": "c502b2d0-4187-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://137.184.57.43/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777218797, "uuid": "0ad1417a-4188-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.86.93:41234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777218908, "uuid": "4cc337e4-4188-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://foplq.vex4moral.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777218971, "uuid": "7250bbe7-4188-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.191.74:47648/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777219026, "uuid": "933d25f4-4188-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.101.187.22:53636/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777219450, "uuid": "8fd59015-4189-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.209.129.88/tplink.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777219450, "uuid": "8ffb1fd7-4189-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.161.149:34889/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777219522, "uuid": "ba9effc2-4189-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.209.129.88/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777219578, "uuid": "dc67740d-4189-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.209.129.88/arm4", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777219578, "uuid": "dc677acd-4189-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.209.129.88/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777219578, "uuid": "dc67807a-4189-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.209.129.88/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777219578, "uuid": "dc678995-4189-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.209.129.88/arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777219689, "uuid": "1e0c2748-418a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://aa5sf.vex4moral.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777219823, "uuid": "6e765bed-418a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.131.232:43915/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777219931, "uuid": "ae6e93fa-418a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-ca5t.vex4moral.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777220061, "uuid": "fc4be7e8-418a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.91.244:54235/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777220357, "uuid": "ac8d3e2a-418b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.191.74:47648/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777220650, "uuid": "5b088cbc-418c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sermarken.vex4moral.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777220829, "uuid": "c5f713e4-418c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zazsvrye.vex4moral.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221127, "uuid": "779f411d-418d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://temmodul.vex4moral.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221847, "uuid": "24ae2def-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thor-hinge.tor4nexil.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221921, "uuid": "50fae665-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.232.134:33101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221979, "uuid": "737a1186-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/fuckjewishpeople.ppc", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221979, "uuid": "7385ba49-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/fuckjewishpeople.mpsl", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221979, "uuid": "73874613-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/fuckjewishpeople.sh", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221979, "uuid": "738aae75-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/fuckjewishpeople.arm5", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221979, "uuid": "738c158a-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/fuckjewishpeople.mips", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221980, "uuid": "73926c57-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/fuckjewishpeople.sparc", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221980, "uuid": "7396c798-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/fuckjewishpeople.arm6", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777221980, "uuid": "73ab8e19-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/fuckjewishpeople.arm7", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222028, "uuid": "906fff4a-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.131.54/bin/support.client.exe", "Tag": [ { "name": "124-198-131-54", "colour": "#c971a9", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222029, "uuid": "9100f3a8-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.131.54/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "124-198-131-54", "colour": "#c971a9", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222038, "uuid": "9699b379-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/fuckjewishpeople.x86", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222038, "uuid": "9699ba37-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/fuckjewishpeople.arm4", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222147, "uuid": "d781bf38-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vqq7jll.tor4nexil.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222209, "uuid": "fc30407e-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.152:8080/bin/support.client.exe", "Tag": [ { "name": "192-159-99-152-8080", "colour": "#125eb2", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222209, "uuid": "fc536885-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.132.54/bin/support.client.exe", "Tag": [ { "name": "124-198-132-54", "colour": "#98d7e8", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222209, "uuid": "fc6f6ca9-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.132.14/bin/support.client.exe", "Tag": [ { "name": "124-198-132-14", "colour": "#b99fd8", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222209, "uuid": "fc7e8276-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.132.37/bin/support.client.exe", "Tag": [ { "name": "124-198-132-37", "colour": "#12f62e", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222210, "uuid": "fcbc6e2c-418f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://192.159.99.209/bin/support.client.exe", "Tag": [ { "name": "192-159-99-209", "colour": "#e074d8", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222268, "uuid": "1f5a73c8-4190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.162/bin/support.client.exe", "Tag": [ { "name": "193-26-115-162", "colour": "#a71e0a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222268, "uuid": "1f966c6a-4190-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://192.159.99.32/bin/support.client.exe", "Tag": [ { "name": "192-159-99-32", "colour": "#a8811a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222753, "uuid": "4089a176-4191-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gl0ss-vault.tor4nexil.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777222994, "uuid": "cff7d477-4191-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://marshform.tor4nexil.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777223536, "uuid": "1398863f-4193-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.60.249:36698/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777223717, "uuid": "7f251cd8-4193-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sand-tar.tor4nexil.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777223953, "uuid": "0bd7fe42-4194-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://okqgg.tor4nexil.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777224008, "uuid": "2caf08f0-4194-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.159.90.22/bin/support.client.exe", "Tag": [ { "name": "203-159-90-22", "colour": "#3626af", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777224616, "uuid": "96d69e74-4195-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fembiq.vel7ramon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777225115, "uuid": "c0a3ef02-4196-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.232.9.229:43291/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777225154, "uuid": "d7b2e99a-4196-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://minorclosed.vel7ramon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777225230, "uuid": "04d2d758-4197-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.14.76:52965/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777225332, "uuid": "4212e7f7-4197-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ughckpku.vel7ramon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777225753, "uuid": "3ce12000-4198-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ofdqgn.vel7ramon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777225819, "uuid": "6459f9e6-4198-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.71.40:46769/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777225926, "uuid": "a3af8268-4198-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.187.101.209:46771/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777226114, "uuid": "1428bd15-4199-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://8ltu2.vel7ramon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777226173, "uuid": "374ac69f-4199-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.235.223.17:54551/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777226412, "uuid": "c57cfe77-4199-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.206.59:55164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777226471, "uuid": "e89a855a-4199-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://snovv8-mesh.vel7ramon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777226786, "uuid": "a4a2fcaa-419a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.124.100.43:51617/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777226950, "uuid": "061c6376-419b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://edit8-grid.sivla2ken.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227185, "uuid": "9238f763-419b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.46/sys_arm7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227185, "uuid": "92390c16-419b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.142.33/payload.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227185, "uuid": "928cc68b-419b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.47/wawan.sh", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227191, "uuid": "95acab5f-419b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/streffy/999/-/blob/main/Mega_Joiner.exe", "Tag": [ { "name": "gitlab", "colour": "#a79648", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227191, "uuid": "95d29b22-419b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/streffy/999/-/blob/main/API.exe", "Tag": [ { "name": "gitlab", "colour": "#a79648", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227193, "uuid": "974b50f0-419b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/adeladel32951/Solaris-crack/raw/refs/heads/main/Solara.exe", "Tag": [ { "name": "adeladel32951", "colour": "#86ce0f", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227194, "uuid": "97627e5c-419b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/streffy/999/-/blob/main/S8D70IPCZNAA.exe", "Tag": [ { "name": "gitlab", "colour": "#a79648", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227194, "uuid": "97e910a0-419b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/nerd1337-afk/1337/raw/refs/heads/main/abe_decrypt.dll", "Tag": [ { "name": "EvelynStealer", "colour": "#88ebcf", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227194, "uuid": "97eb048c-419b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/streffy/999/-/blob/main/L7XH7UR9695U.exe", "Tag": [ { "name": "gitlab", "colour": "#a79648", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227194, "uuid": "97eb110c-419b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/streffy/999/-/raw/main/Mega_Joiner.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gitlab", "colour": "#a79648", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227195, "uuid": "981093e5-419b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/adeladel32951/Solaris-crack/raw/refs/heads/main/ReevLoader.exe", "Tag": [ { "name": "adeladel32951", "colour": "#86ce0f", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227195, "uuid": "98387e6b-419b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/adeladel32951/Solaris-crack/raw/refs/heads/main/stub.exe", "Tag": [ { "name": "EvelynStealer", "colour": "#88ebcf", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227196, "uuid": "98dce770-419b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/adeladel32951/Solaris-crack/raw/refs/heads/main/BootstrapperNew.exe", "Tag": [ { "name": "adeladel32951", "colour": "#86ce0f", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227197, "uuid": "99744ae4-419b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://etomoidomen.cfd/api/index.php?a=dl&token=d0a5e3b511c293206448ac44451b87f717fbdfa0c2f97242082bd2f29748a486&src=uranuseng.com&mode=cloudflare", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227206, "uuid": "9ed03498-419b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/streffy/999/-/raw/main/API.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "gitlab", "colour": "#a79648", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227207, "uuid": "9f3becfd-419b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumennix.live/uploads/Lumen.zip", "Tag": [ { "name": "pw-LUMEN", "colour": "#e60105", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227320, "uuid": "e2f61120-419b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fldenmd.sivla2ken.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227381, "uuid": "0762bbef-419c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.235.223.17:54551/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777227428, "uuid": "22de2d1a-419c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.60.249:36698/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777228029, "uuid": "8939623f-419d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wildsai.sivla2ken.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777228038, "uuid": "8efb6bbe-419d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.124.100.43:51617/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777228160, "uuid": "d7a06d94-419d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.206.59:55164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777228627, "uuid": "edfbc844-419e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.166.51.206:57693/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777228633, "uuid": "f18ea49e-419e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://l1chen-hold.sivla2ken.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777228763, "uuid": "3edb7c25-419f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.49.164:60266/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777228816, "uuid": "5e8474fe-419f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://darcymotors2.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest&c=ford&c=&c=&c=&c=&c=&c=&c=", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777229119, "uuid": "133f4ce0-41a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xzgik.sivla2ken.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777229130, "uuid": "19988e99-41a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.10.81:39731/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777229305, "uuid": "81b70980-41a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.122.254:36102/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777229418, "uuid": "c51bc598-41a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wo0hv.sivla2ken.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777229768, "uuid": "95c8a556-41a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mer-lithor.qor9mital.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777229827, "uuid": "b8f2463f-41a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.194:43687/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777230147, "uuid": "7805d057-41a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.93.180:45327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777230193, "uuid": "934886de-41a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warm-senso.qor9mital.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777230321, "uuid": "df8c0909-41a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.49.164:60266/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777230673, "uuid": "b16bf125-41a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://boos-gri.qor9mital.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231032, "uuid": "87169f50-41a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/ultron.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231032, "uuid": "8716a013-41a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/ultron.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231032, "uuid": "871bfd58-41a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/ultron.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231032, "uuid": "875c61a5-41a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/ultron.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231034, "uuid": "8838ff69-41a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/ultron.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231040, "uuid": "8bd94e48-41a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/ultron.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231041, "uuid": "8ca072ef-41a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/ultron.x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231042, "uuid": "8d2e209d-41a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/ultron.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231042, "uuid": "8d2e25ab-41a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/ultron.ppc4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231042, "uuid": "8d2e3331-41a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/ultron.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231042, "uuid": "8d2e5fe0-41a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/ultron.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231043, "uuid": "8d8fbb7d-41a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/ultron.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231043, "uuid": "8de927bb-41a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/ultron.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231046, "uuid": "8fbfae77-41a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://happytugsbakery.com/ultron.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231281, "uuid": "1b7fa24d-41a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.222.212:47601/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231327, "uuid": "372cda57-41a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://royapuls.qor9mital.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231517, "uuid": "a85e79be-41a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brigh-gold.qor9mital.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231752, "uuid": "34ac15da-41a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.185/shabak.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231812, "uuid": "584d7355-41a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.185/shabak.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231813, "uuid": "58d4fdea-41a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/60w9rf0up01o2256sej7q/userenv.txt?rlkey=jvvjl998pgu4aqx8w8l5bf7ek&st=k4tk7s0w&raw=1", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "5f7ac191-41a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.185/shabak.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "5f7ad3a0-41a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.185/shabak.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "5f7ae273-41a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.185/cometome", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "5f7ae621-41a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.185/shabak.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "5f7afbee-41a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.185/shabak.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "5f7b030e-41a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.185/cache", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "5f7b1bf3-41a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.185/shabak.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "5f7b3746-41a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.185/shabak.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "5f7b416f-41a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.185/shabak.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "5f85edd9-41a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.185/shabak.arm4", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "5f860cdf-41a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.185/shabak.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "5f8615f7-41a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.185/shabak.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "5f866040-41a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.185/shabak.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777231824, "uuid": "5f8d33eb-41a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.185/shabak.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232053, "uuid": "e795fb2b-41a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tfoq2qdi.qor9mital.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232228, "uuid": "4fee33fc-41a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.121.190:36056/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232411, "uuid": "bd142807-41a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ve1ve-loop.zun5larek.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232424, "uuid": "c4e20ed5-41a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.95.185/shabak.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232549, "uuid": "0f43dc5d-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.244.233.1:55173/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232660, "uuid": "51bf9627-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.142.33/luxzzxzzx/luxzz.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232663, "uuid": "53686618-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.142.33/luxzzxzzx/luxzz.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232663, "uuid": "538e6e02-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.142.33/luxzzxzzx/luxzz.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232663, "uuid": "53992210-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.142.33/luxzzxzzx/luxzz.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232663, "uuid": "53ae4e84-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.142.33/luxzzxzzx/luxzz.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "53c127cb-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.142.33/luxzzxzzx/luxzz.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "53caf288-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.142.33/luxzzxzzx/luxzz.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "53cb01ee-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.142.33/luxzzxzzx/luxzz.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "53cb0f24-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.142.33/luxzzxzzx/luxzz.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "53cdd386-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.142.33/luxzzxzzx/luxzz.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "53cf8894-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.142.33/luxzzxzzx/debug", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "53dd1df2-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.142.33/luxzzxzzx/luxzz.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "5400485d-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.142.33/luxzzxzzx/luxzz.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232664, "uuid": "54060a97-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.142.33/luxzzxzzx/luxzz.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232790, "uuid": "9f0461cc-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.94/terrabot/023782pler.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232790, "uuid": "9f172249-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.94/terrabot/023782pler.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232790, "uuid": "9f36427f-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.94/terrabot/023782pler.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232790, "uuid": "9f5420f5-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.94/terrabot/023782pler.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232791, "uuid": "9f784552-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.94/terrabot/023782pler.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232791, "uuid": "9f973205-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.94/terrabot/023782pler.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232791, "uuid": "9fad186e-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.94/terrabot/023782pler.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232791, "uuid": "9fc33daa-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.94/terrabot/023782pler.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232791, "uuid": "9fe3199b-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.94/terrabot/023782pler.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232791, "uuid": "a000ffde-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.94/terrabot/023782pler.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232792, "uuid": "a02c4ce7-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.94/terrabot/023782pler.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232792, "uuid": "a03e7a46-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.94/terrabot/023782pler.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232792, "uuid": "a05c9596-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.94/terrabot/023782pler.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232792, "uuid": "a07eca7f-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.94/terrabot/023782pler.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232792, "uuid": "a092589a-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.98.94/terrabot/023782pler.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777232890, "uuid": "daecda4f-41a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ark-valeen.zun5larek.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233197, "uuid": "91826d25-41a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.241.208.194/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "185-241-208-194", "colour": "#644c2a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233200, "uuid": "93812be1-41a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.61/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "124-198-131-61", "colour": "#a93849", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233251, "uuid": "b220842c-41a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://railspark.zun5larek.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233309, "uuid": "d436f792-41a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.138.16.223/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "45-138-16-223", "colour": "#397ae2", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233313, "uuid": "d6b1ee40-41a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.225/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "193-26-115-225", "colour": "#bb8d90", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233314, "uuid": "d727b083-41a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.138.16.51/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "45-138-16-51", "colour": "#c72901", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233314, "uuid": "d7509343-41a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://203.159.90.245/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "203-159-90-245", "colour": "#8f9a0a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233314, "uuid": "d7664f7f-41a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.154.98.122/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "45-154-98-122", "colour": "#a30209", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233314, "uuid": "d7a04b49-41a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.159.90.22/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "203-159-90-22", "colour": "#3626af", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233367, "uuid": "f6f21e59-41a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.80.158.96/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "45-80-158-96", "colour": "#7718d7", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233626, "uuid": "915bc378-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.159.143:58189/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233676, "uuid": "aefe7547-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clustchoru.zun5larek.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233689, "uuid": "b6e38926-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.109.203.143:38523/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233801, "uuid": "f9cf97ca-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3229260.contaboserver.net/luxzzxzzx/debug", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233801, "uuid": "f9cfedb2-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233801, "uuid": "f9db1119-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233801, "uuid": "f9e0e885-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233801, "uuid": "f9ea37e9-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233801, "uuid": "f9fd9539-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233801, "uuid": "f9fe97ac-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233802, "uuid": "fa0adcbc-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233802, "uuid": "fa0e245d-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233802, "uuid": "fa3a1dd0-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233802, "uuid": "fa65778d-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233802, "uuid": "fa6588b2-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233802, "uuid": "fa7523c5-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://luxzzc2servers.my.id/luxzzxzzx/debug", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233802, "uuid": "fa7bccd1-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233802, "uuid": "fa99dde9-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233802, "uuid": "fa99e94d-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233803, "uuid": "fa9dadd8-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233803, "uuid": "fa9dc806-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233803, "uuid": "fa9ddceb-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233803, "uuid": "faa0b1a2-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233803, "uuid": "faa165c1-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233808, "uuid": "fda7cfe2-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233808, "uuid": "fdb7abfc-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233808, "uuid": "fdc1203e-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777233808, "uuid": "fdce3b20-41aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234689, "uuid": "0b0e75a0-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.92.1.43/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "45-92-1-43", "colour": "#6ad31b", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234689, "uuid": "0b32e5bf-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.244.233.1:55173/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234690, "uuid": "0b542e27-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.186.69/bin/support.client.exe", "Tag": [ { "name": "45-88-186-69", "colour": "#2a44b2", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234690, "uuid": "0b6016e4-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.110.47:41025/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234690, "uuid": "0b6dfc71-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.186.209/bin/support.client.exe", "Tag": [ { "name": "45-88-186-209", "colour": "#667f8f", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234691, "uuid": "0c58282f-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.186.209/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "45-88-186-209", "colour": "#667f8f", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234694, "uuid": "0dbe02ca-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trinexa.zun5larek.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234695, "uuid": "0eca2f5c-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dibzyqjy.zun5larek.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234697, "uuid": "0fbd9010-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225//arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234703, "uuid": "1399a1c5-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.47/terrabot/023782pler.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234704, "uuid": "13c1ad0c-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.47/terrabot/023782pler.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234704, "uuid": "1428dbc6-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.47/terrabot/023782pler.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234705, "uuid": "145679b8-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.47/terrabot/023782pler.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234705, "uuid": "14683eef-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.47/terrabot/023782pler.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234705, "uuid": "14ac9b0e-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.47/terrabot/023782pler.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234705, "uuid": "14aca181-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.47/terrabot/023782pler.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234705, "uuid": "14acaf2b-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.47/terrabot/023782pler.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234705, "uuid": "14ccec87-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.47/terrabot/023782pler.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234706, "uuid": "14ea1cd5-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.47/terrabot/023782pler.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234706, "uuid": "14fc1975-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.47/terrabot/023782pler.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234706, "uuid": "151c8feb-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.47/terrabot/023782pler.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234706, "uuid": "15397b83-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.47/terrabot/023782pler.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234711, "uuid": "184249a7-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234711, "uuid": "18558c89-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://luxzzc2servers.my.id/luxzzxzzx/luxzz.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "luxzzc2servers-my-id", "colour": "#b82ee8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234712, "uuid": "18ba3c03-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.47/terrabot/023782pler.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234712, "uuid": "18f173ec-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3229260.contaboserver.net/luxzzxzzx/luxzz.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "vmi3229260-contaboserver-net", "colour": "#dbff4a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234715, "uuid": "1ab9b677-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.47/terrabot/023782pler.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234765, "uuid": "382da98a-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.186.69/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "45-88-186-69", "colour": "#2a44b2", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777234872, "uuid": "77f2451f-41ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://creehid.rax3vomen.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235227, "uuid": "4bf55943-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://48oni.rax3vomen.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "75288404-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/huhu/titanjr.ppc", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "75288613-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/huhu/titanjr.x86_32", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "7532f242-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/huhu/titanjr.spc", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "75345540-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/huhu/titanjr.i486", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "75346cfe-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/titanjr.arm", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "7535bb26-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/huhu/titanjr.mips", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "753f88f3-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/titanjr.m68k", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "7544138a-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/huhu/titanjr.sh4", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "75449e80-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/huhu/titanjr.mipsl", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "75455f2f-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/titanjr.i686", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "75465dbd-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/huhu/titanjr.arc", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "755b7699-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/huhu/titanjr.arm5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235297, "uuid": "756d2f9f-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.159.143:58189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "7678f362-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/titanjr.arm6", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "767b24be-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/huhu/titanjr.i686", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "767b4018-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/titanjr.i486", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "767d40f6-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/titanjr.arm5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "767dc459-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/huhu/titanjr.x86_64", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "768166d0-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/huhu/titanjr.ppc440", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "768438e9-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/huhu/titanjr.arm6", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "76875901-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/huhu/titanjr.arm", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "7689d750-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/titanjr.arc", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "768ddd2c-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/titanjr.mipsl", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "768f6db5-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/titanjr.mips", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "768f9770-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/huhu/titanjr.m68k", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235299, "uuid": "7695021b-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/huhu/titanjr.arm7", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235303, "uuid": "78df3044-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/titanjr.arm7", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235359, "uuid": "9a6f6ed0-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/titanjr.ppc440", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235360, "uuid": "9aaaa8d3-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/windyloveyou/windy.x86_64", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235360, "uuid": "9aeb98d6-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/titanjr.sh4", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235360, "uuid": "9b33c7da-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/windyloveyou/windy.ppc", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235360, "uuid": "9b3ad113-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/windyloveyou/windy.m68k", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "9b936131-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/windyloveyou/windy.mpsl", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "9b954cd4-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/windyloveyou/debug", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "9b9af03a-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/titanjr.ppc", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "9bc5ce90-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/windyloveyou/windy.spc", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "9bcab10d-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/1.sh", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "9bd47dec-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/windyloveyou/windy.x86", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235361, "uuid": "9bd82b19-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/windyloveyou/windy.arc", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "9be2189f-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/titanjr.spc", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "9be6e362-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/titanjr.x86_32", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "9bea16c0-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/windyloveyou/windy.arm7", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "9beab2b8-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/windyloveyou/windy.sh4", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "9bef1dbe-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/titanjr.x86_64", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "9bf54575-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/windyloveyou/windy.mips", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "9c0e1e8d-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/windyloveyou/windy.arm5", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "9c0ef3e1-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/windyloveyou/windy.i686", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "9c19298a-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/windyloveyou/windy.arm6", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235362, "uuid": "9c2a50c6-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/windyloveyou/windy.arm", "Tag": [ { "name": "194-163-151-12", "colour": "#03da2a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235472, "uuid": "dd7fd5de-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.71.132:52267/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235527, "uuid": "fe894b72-41ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.110.47:41025/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235767, "uuid": "8d56ccba-41af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stead5-switch.rax3vomen.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235771, "uuid": "8fd0aa46-41af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.68.214:53177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235772, "uuid": "909cfdf8-41af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.43.166.190:37777/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235827, "uuid": "b124e16b-41af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://84.54.33.77/bin/support.client.exe", "Tag": [ { "name": "84-54-33-77", "colour": "#b12170", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235827, "uuid": "b13e680d-41af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://84.54.33.157/bin/support.client.exe", "Tag": [ { "name": "84-54-33-157", "colour": "#ceb1fa", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235831, "uuid": "b3770256-41af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://84.54.33.157/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "84-54-33-157", "colour": "#ceb1fa", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235886, "uuid": "d4bc85b2-41af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://84.54.33.71/bin/support.client.exe", "Tag": [ { "name": "84-54-33-71", "colour": "#b26f9e", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235889, "uuid": "d60f3d37-41af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://84.54.33.71/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "84-54-33-71", "colour": "#b26f9e", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235946, "uuid": "f87ac209-41af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://84.54.33.214/bin/support.client.exe", "Tag": [ { "name": "84-54-33-214", "colour": "#36bd74", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235949, "uuid": "f9d8eea8-41af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://84.54.33.214/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "84-54-33-214", "colour": "#36bd74", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777235949, "uuid": "f9d8f572-41af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://84.54.33.77/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "84-54-33-77", "colour": "#b12170", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236188, "uuid": "88522967-41b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kellithis.rax3vomen.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236552, "uuid": "61408f48-41b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://resolvercultur.rax3vomen.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236855, "uuid": "16292365-41b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.109.203.143:38523/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777236968, "uuid": "592d31f1-41b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warmcon.rax3vomen.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777237210, "uuid": "e9e5c943-41b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.43.166.190:37777/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777237278, "uuid": "1277dcff-41b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.133.199:34212/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777237329, "uuid": "309cf50a-41b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://networkhub.syke8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777237382, "uuid": "50203d16-41b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ssilentsss/ssilentsss/releases/download/silent-22-04-2026/Silent_Utility_V4.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777237686, "uuid": "059d4f66-41b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.68.214:53177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777237688, "uuid": "06d5edb6-41b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://10ya0-dock.syke8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777237928, "uuid": "95a22cf9-41b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.166.42.132:55035/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777237987, "uuid": "b8da89b0-41b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soundatom.syke8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777238349, "uuid": "9057c9aa-41b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vel-draex.syke8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777238529, "uuid": "fbee9d76-41b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.204.152:33124/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777238715, "uuid": "6a6ffd58-41b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pixel9-layer.syke8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777238851, "uuid": "bbbac9f6-41b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.1.39:48472/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777239067, "uuid": "3c9b3361-41b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://uxmidt.syke8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777239371, "uuid": "f19bc3ca-41b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://harbquarr.tov1maren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777239427, "uuid": "12c890bd-41b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.166.42.132:55035/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777239676, "uuid": "a7679873-41b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.11.57:33814/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777239727, "uuid": "c60962ab-41b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quor-valeix.tov1maren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777239978, "uuid": "5b5a5eec-41b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.181.235.167:38695/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777240029, "uuid": "79e0f77f-41b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://54lzq.tov1maren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777240328, "uuid": "2c1e2551-41ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.182.189:60731/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777240339, "uuid": "32a8fd74-41ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.199.192:53273/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777240386, "uuid": "4e9f4178-41ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://9al62yq7.souf1atwindow.digital/?ublib=EYTxhtIxrnUbiDDB", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777240389, "uuid": "50bf3fa8-41ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mernex1ar.tov1maren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777240529, "uuid": "a3b470da-41ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.1.39:48472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777240636, "uuid": "e3da2fc1-41ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.24.47:44153/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777240760, "uuid": "2d7acf7d-41bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.181.235.167:38695/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777240992, "uuid": "b79ecce9-41bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ax2e.tov1maren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777241169, "uuid": "2199cd12-41bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hen1a.tov1maren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777241228, "uuid": "44c47939-41bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.85.99.159:38787/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777241411, "uuid": "b15a9f64-41bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vfge.kyl6varet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777241767, "uuid": "85f33f28-41bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://9hq5.kyl6varet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777241793, "uuid": "9570f787-41bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.13.124:39937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777241896, "uuid": "d28c4226-41bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.199.192:53273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777242188, "uuid": "80ab19d4-41be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quorcresten1.kyl6varet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777242261, "uuid": "ac0d1a6a-41be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.71.248.15:55244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777242370, "uuid": "ed3506fc-41be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5ynt46-node.kyl6varet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777242728, "uuid": "c28ebec0-41bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl1e-panel.kyl6varet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777242728, "uuid": "c2973c19-41bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.85.99.159:38787/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777242912, "uuid": "3033b1e6-41c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.114.188:36350/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777242976, "uuid": "5674c224-41c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.200.227:37392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243150, "uuid": "be345cc9-41c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lfixa2ax.kyl6varet.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243220, "uuid": "e81f01c3-41c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.212.184.137:54079/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243339, "uuid": "2eadfa03-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.24.139:43825/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243389, "uuid": "4c632b50-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-rnead.nov2sirel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243452, "uuid": "71edacd3-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.7.121:44950/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243465, "uuid": "79a97b05-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.44.250:33994/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243465, "uuid": "7a217cc5-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.70.139.133:51644/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243465, "uuid": "7a245e39-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.2.129:53615/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243466, "uuid": "7a8bffbf-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.123.73.167:60208/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243466, "uuid": "7ab23e0f-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.135.60.162:58061/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243467, "uuid": "7adc9a8c-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.252.114.171:45647/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243468, "uuid": "7b9c38ab-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.158.193.79:58038/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243468, "uuid": "7bc42105-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.1.107.44:53652/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243576, "uuid": "bc40dadf-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243576, "uuid": "bc41c035-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243576, "uuid": "bc4a0c01-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243576, "uuid": "bc57e5e3-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243578, "uuid": "bd3fe8de-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243580, "uuid": "be31c44b-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243580, "uuid": "be411831-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243580, "uuid": "be471904-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243580, "uuid": "be49be1f-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243580, "uuid": "be6867a6-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/hiddenbin/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243582, "uuid": "bfe96080-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243582, "uuid": "bfe97b34-41c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.61.39.140/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243747, "uuid": "22328367-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://taldra2ex.nov2sirel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243817, "uuid": "4bf892db-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://aps.voltpanel.cloud/install.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243818, "uuid": "4c75d21f-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/agent_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243818, "uuid": "4c762359-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/agent_spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243818, "uuid": "4c762963-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/agent_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243818, "uuid": "4c7633a6-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/agent_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243818, "uuid": "4c7b7675-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/install.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243821, "uuid": "4e5ef0b8-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/agent_armv6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243821, "uuid": "4e5efb99-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/agent_armv7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243821, "uuid": "4e64f17c-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/agent_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243822, "uuid": "4e86e31d-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/agent_mipsle", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243822, "uuid": "4e86ef79-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/agent_arm64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243822, "uuid": "4e8740c4-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/agent_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243822, "uuid": "4e8e9104-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/agent_amd64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243875, "uuid": "6e666025-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://aps.voltpanel.cloud/agent_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243876, "uuid": "6f2cb346-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://aps.voltpanel.cloud/agent_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243876, "uuid": "6f2cc682-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://aps.voltpanel.cloud/agent_spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243876, "uuid": "6f2ccf04-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://aps.voltpanel.cloud/agent_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243877, "uuid": "6f5a9ffd-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://aps.voltpanel.cloud/agent_mipsle", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243878, "uuid": "7043b02f-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://aps.voltpanel.cloud/agent_arm64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243878, "uuid": "705272c5-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://aps.voltpanel.cloud/agent_amd64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243878, "uuid": "70527402-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://aps.voltpanel.cloud/agent_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243878, "uuid": "705287bb-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://aps.voltpanel.cloud/agent_armv6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243879, "uuid": "70877bdb-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.188.11:36740/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243880, "uuid": "71295996-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://aps.voltpanel.cloud/agent_armv7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243886, "uuid": "7520239c-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://aps.voltpanel.cloud/agent_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777243987, "uuid": "b14b7935-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://20.198.18.136:8080/agent.x64.exe", "Tag": [ { "name": "AdaptixC2", "colour": "#BD7352", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777244111, "uuid": "fabf5ef5-41c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://4ppcd.nov2sirel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777244228, "uuid": "406a52c1-41c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.20.88:45937/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777244228, "uuid": "40a73976-41c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.12.41:36588/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777244414, "uuid": "af4707af-41c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://m3rge-mark.nov2sirel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777244527, "uuid": "f319f72d-41c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.177.16:33143/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777244539, "uuid": "fa19c802-41c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.153.230:50437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777244540, "uuid": "fad9e320-41c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.85.168.32:45847/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777244597, "uuid": "1c6a514f-41c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.212.184.137:54079/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777244776, "uuid": "87637573-41c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://7xekivp.nov2sirel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777244963, "uuid": "f6fae243-41c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.232.9.229:43291/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777245135, "uuid": "5d364ed6-41c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hglj.nov2sirel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777245143, "uuid": "6212b2c9-41c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.24.139:43825/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777245327, "uuid": "cfd6d982-41c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.188.11:36740/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777245728, "uuid": "bec05a84-41c6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.20.88:45937/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777246043, "uuid": "7a3e9f62-41c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.177/Yboats.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777246043, "uuid": "7a4c2c60-41c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.177/Yboats.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777246043, "uuid": "7a518ae2-41c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.177/Yboats.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777246043, "uuid": "7a53a139-41c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.177/Yboats.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777246043, "uuid": "7a5d19f0-41c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.177/Yboats.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777246043, "uuid": "7a63bc11-41c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.177/Yboats.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777246048, "uuid": "7db451c8-41c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.177/Yboats.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777246100, "uuid": "9c6cbb70-41c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.177/Yboats.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777246100, "uuid": "9c767d4d-41c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.177/Yboats.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777246159, "uuid": "bfa3e45c-41c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.177/Yboats.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777246227, "uuid": "e8569165-41c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.177/Yboats.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777246403, "uuid": "516257c4-41c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/iran.x86_64", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777247110, "uuid": "f6465c3c-41c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.243/files/file_e1a96e130788ce89.exe", "Tag": [ { "name": "54e64e", "colour": "#eb829a", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777247245, "uuid": "4707dfed-41ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.37.134:35590/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777247355, "uuid": "88673feb-41ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/iran.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777247355, "uuid": "8867c0e6-41ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/iran.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777247355, "uuid": "8867e219-41ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/iran.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777247355, "uuid": "88715f25-41ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/iran.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777247362, "uuid": "8c78380b-41ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/iran.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777247362, "uuid": "8c78382d-41ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/iran.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777247362, "uuid": "8c7b2ee7-41ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/iran.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777247362, "uuid": "8c7fb4d5-41ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/iran.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777247362, "uuid": "8c8340a7-41ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/iran.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777247362, "uuid": "8c83533b-41ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/iran.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777247362, "uuid": "8c87d267-41ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/iran.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777247362, "uuid": "8c8fde36-41ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/iran.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777247372, "uuid": "92e4555d-41ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/iran.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777247892, "uuid": "c88402bc-41cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.203.123.44:60683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233665, "uuid": "a8d55176-41aa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.109.203.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777192924, "uuid": "cd3d30bc-414b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.111.18.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243443, "uuid": "6ca6e0ce-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.158.193.79", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212426, "uuid": "34edeb01-4179-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.231.182", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777192025, "uuid": "b4fc7577-4149-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.236.44.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777237684, "uuid": "044711a7-41b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "10ya0-dock.syke8liron.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777202046, "uuid": "0a2469bb-4161-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.136.98.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777239965, "uuid": "53ec8b3f-41b9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.181.235.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777220045, "uuid": "f26d6201-418a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.91.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777191365, "uuid": "2bb060f3-4148-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.14.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777241225, "uuid": "42f75a82-41bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.85.99.159", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212305, "uuid": "ed653769-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.164.253.1", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777176907, "uuid": "82424deb-4126-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.140.190.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777167125, "uuid": "bb857b87-410f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.225.49.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777225084, "uuid": "ae2ae451-4196-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.232.9.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232525, "uuid": "0157800c-41a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.244.233.1", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777196525, "uuid": "2f98f795-4154-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.184.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777242966, "uuid": "5062432a-41c0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.93.200.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212185, "uuid": "a54b3937-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.27.110", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777237264, "uuid": "0a0111c5-41b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.133.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777186025, "uuid": "bd408c00-413b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.50.80", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200064, "uuid": "6ce18b95-415c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.51.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777191544, "uuid": "96df1e8f-4148-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.99.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777171685, "uuid": "59f2ad65-411a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.244.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777194726, "uuid": "ff2c26fb-414f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.53.121.31", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212185, "uuid": "a54c2c32-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.216.182.208", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777185424, "uuid": "5713522e-413a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.244.232.184", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777228744, "uuid": "33b43214-419f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.49.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243325, "uuid": "264ef97d-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.24.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777165925, "uuid": "f0872992-410c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.248.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777230125, "uuid": "6ad3fa08-41a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.93.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235465, "uuid": "d99ac0e5-41ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.71.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777244225, "uuid": "3ee608f7-41c3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.12.41", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777196825, "uuid": "e252cd5c-4154-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.183.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777190284, "uuid": "a7bbf76e-4145-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.250.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212185, "uuid": "a54b6b91-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.30.87", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777218366, "uuid": "09d89f14-4187-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.165.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777196825, "uuid": "e252c870-4154-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.14.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777205824, "uuid": "d637eefe-4169-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.151.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777172107, "uuid": "54f1b557-411b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.11.143.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777196707, "uuid": "9c08f044-4154-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.240.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212305, "uuid": "ed633d5e-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.167.107.251", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212185, "uuid": "a54a4463-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.253.80.3", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777184226, "uuid": "8c76affb-4137-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.38.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777188965, "uuid": "95839d36-4142-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.162.179.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777237925, "uuid": "93bedcc4-41b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.166.42.132", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212124, "uuid": "814a5f04-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.30.117.248", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777183926, "uuid": "d9b599b6-4136-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.10.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212365, "uuid": "10a19006-4179-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.68.84", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777171506, "uuid": "ef3e6e57-4119-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.171.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212185, "uuid": "a54b64a3-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.11.204", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212305, "uuid": "ed63b9a2-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.81.174", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777193345, "uuid": "c83ecdc9-414c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.148.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777167426, "uuid": "6ee69652-4110-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.148.229.86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212124, "uuid": "814b6c75-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.95.26", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777226165, "uuid": "325598d8-4199-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.235.223.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777202764, "uuid": "b67b21ed-4162-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.236.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203725, "uuid": "f33af19f-4164-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.170.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777172225, "uuid": "9b91755b-411b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.11.12", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233185, "uuid": "8a5900f0-41a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.131.61", "Tag": [ { "name": "124-198-131-61", "colour": "#a93849", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777222206, "uuid": "fa5ae7b1-418f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.132.14", "Tag": [ { "name": "124-198-132-14", "colour": "#b99fd8", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777222206, "uuid": "fa5b6116-418f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.198.132.37", "Tag": [ { "name": "124-198-132-37", "colour": "#12f62e", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231266, "uuid": "12ec5599-41a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.222.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212124, "uuid": "814c11f2-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.33.178", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777188844, "uuid": "4d5d08db-4142-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.68.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777218666, "uuid": "bc530600-4187-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "137.184.57.43", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243443, "uuid": "6ca7fdb0-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.135.60.162", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243443, "uuid": "6ca7892c-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.1.107.44", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227185, "uuid": "91facfd0-419b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "140.233.190.47", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777164965, "uuid": "b40f9bd9-410a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "146.103.41.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212426, "uuid": "34ed8f0f-4179-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.92.24", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203126, "uuid": "8e02694e-4163-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.114.227.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777238526, "uuid": "fa00da40-41b5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.204.152", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212245, "uuid": "c9276f4d-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.69.89", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212185, "uuid": "a54a0a90-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.78.242", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777185845, "uuid": "5199fcbf-413b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.161.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235764, "uuid": "8ba1e91a-41af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.43.166.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777164245, "uuid": "070dd70d-4109-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.159", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199823, "uuid": "dd728065-415b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.46", "Tag": [ { "name": "176-65-139-46", "colour": "#96a663", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209666, "uuid": "c82f72e3-4172-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.148.160", "Tag": [ { "name": "176-65-148-160", "colour": "#f21bcf", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212245, "uuid": "c92bbbb7-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.81.6.145", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212124, "uuid": "814ad3ff-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.108.190.219", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777202225, "uuid": "74ca52ce-4161-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.119.166.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777174325, "uuid": "7f4d11f2-4120-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.11.27", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212365, "uuid": "10a388e0-4179-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.11.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212185, "uuid": "a54ca870-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.71.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777208224, "uuid": "6ce14181-416f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.118.216", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777169524, "uuid": "51860d49-4115-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.156.166", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777177865, "uuid": "bd61f4a0-4128-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.160.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209545, "uuid": "802dffe5-4172-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.224.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212305, "uuid": "ed64ccc6-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.224.70", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777164245, "uuid": "070e381b-4109-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.161.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777240326, "uuid": "2ac0fec8-41ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.199.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777161845, "uuid": "70ad823e-4103-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.92.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200426, "uuid": "44658a9b-415d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.43.198", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212124, "uuid": "814b1b47-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.45.152", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212844, "uuid": "2ea9eda0-417a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.247.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777166344, "uuid": "ea6cd375-410d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.0.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214586, "uuid": "3c6c4b7d-417e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.188.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777244525, "uuid": "f1b599f6-41c3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.85.168.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233185, "uuid": "8a5931e3-41a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.241.208.194", "Tag": [ { "name": "185-241-208-194", "colour": "#644c2a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777219446, "uuid": "8d336c88-4189-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.209.129.88", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777213685, "uuid": "237b8d9a-417c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.109.200.12", "Tag": [ { "name": "192-109-200-12", "colour": "#dac1a5", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777213685, "uuid": "237bf665-417c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.109.200.131", "Tag": [ { "name": "192-109-200-131", "colour": "#2031b2", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214284, "uuid": "88add458-417d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.109.200.9", "Tag": [ { "name": "192-109-200-9", "colour": "#23acf3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777222206, "uuid": "fa5baa5f-418f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.159.99.209", "Tag": [ { "name": "192-159-99-209", "colour": "#e074d8", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212365, "uuid": "109f72eb-4179-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.163.187.69", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777222265, "uuid": "1d94e0db-4190-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.26.115.162", "Tag": [ { "name": "193-26-115-162", "colour": "#a71e0a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777208045, "uuid": "01b98242-416f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "194.26.192.44", "Tag": [ { "name": "194-26-192-44", "colour": "#de847f", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243985, "uuid": "b00aec0f-41c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "20.198.18.136", "Tag": [ { "name": "AdaptixC2", "colour": "#BD7352", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777189325, "uuid": "6bfbef70-4143-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.107.99.225", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243443, "uuid": "6ca738fe-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.70.139.133", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777224006, "uuid": "2b7241e5-4194-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.159.90.22", "Tag": [ { "name": "203-159-90-22", "colour": "#3626af", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233306, "uuid": "d2c6ea9b-41a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.159.90.245", "Tag": [ { "name": "203-159-90-245", "colour": "#8f9a0a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214284, "uuid": "88adc5f5-417d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "204.76.203.195", "Tag": [ { "name": "204-76-203-195", "colour": "#d42294", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214284, "uuid": "88adc627-417d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "204.76.203.248", "Tag": [ { "name": "204-76-203-248", "colour": "#638c90", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212124, "uuid": "814aa57a-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "206.135.172.47", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777178225, "uuid": "93c33635-4129-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "210.212.28.129", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212365, "uuid": "10a481de-4179-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "211.93.95.46", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212245, "uuid": "c9336085-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "216.126.86.125", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777210206, "uuid": "09c4d448-4174-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.208.145.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777218965, "uuid": "6e9e5a06-4188-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.191.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212365, "uuid": "10a39727-4179-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.20.102", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777218545, "uuid": "748d3b1a-4187-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.13.232.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777190645, "uuid": "7ea16571-4146-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.14.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212306, "uuid": "ed6851dc-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.14.130", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777247885, "uuid": "c4256c6e-41cb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.203.123.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777226765, "uuid": "9835c339-419a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.124.100.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212245, "uuid": "c9278906-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.127.90.242", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212245, "uuid": "c92bdb25-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.100.236", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212124, "uuid": "814a9b9f-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.145.138", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199106, "uuid": "31b484e6-415a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.79.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777186565, "uuid": "fea06c1e-413c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.133.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212124, "uuid": "814a891e-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.198.206", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777167006, "uuid": "7503e868-410f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.84.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233608, "uuid": "8695e988-41aa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.159.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777174984, "uuid": "08393a04-4122-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.220.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243443, "uuid": "6ca7a259-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.123.73.167", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212305, "uuid": "ed61f863-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.204.198.85", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212245, "uuid": "c930569f-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.204.199.139", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777242906, "uuid": "2cf26278-41c0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.114.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232225, "uuid": "4e68ba94-41a7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.121.190", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777240625, "uuid": "dd4d82ce-41ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.24.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212185, "uuid": "a54a2cbc-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.32.13", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212306, "uuid": "ed6a3199-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.49.34.147", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212185, "uuid": "a54cde6b-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.229.69", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212245, "uuid": "c930ec03-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.98.87", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777242245, "uuid": "a2ab8eb2-41be-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.71.248.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777162625, "uuid": "417b1ef1-4105-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.37.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212124, "uuid": "814ac67f-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.80.82.101", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777244225, "uuid": "3ee5ff13-41c3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.20.88", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777178407, "uuid": "00112581-412a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.89.163.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777204747, "uuid": "5473d571-4167-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39hwegfg.qiv7moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777215787, "uuid": "08d3e83d-4181-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "3eums.to6varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777207807, "uuid": "73fc6392-416e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "3vnp4.zex2liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777197065, "uuid": "7114ae58-4155-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "40l627.miv9soren.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212245, "uuid": "c933aff5-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.185.201", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777241765, "uuid": "84aa784c-41bd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.180.13.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243443, "uuid": "6ca7999b-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.2.129", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777223525, "uuid": "0cc2642e-4193-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.60.249", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200364, "uuid": "1ff19f50-415d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.220.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777166525, "uuid": "562aae9f-410e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.234.76", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212185, "uuid": "a54bf770-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.157.42", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777170485, "uuid": "8e520da2-4117-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.175.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777182185, "uuid": "cc5da707-4132-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.219.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777184648, "uuid": "8824338f-4138-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.199.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777207626, "uuid": "08106074-416e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.24.165", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777163047, "uuid": "3cc09ad6-4106-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.25.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777171326, "uuid": "8372b7e1-4119-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.108.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777213145, "uuid": "e1bb2e3b-417a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.170.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212426, "uuid": "34edba2f-4179-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.175.195", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212426, "uuid": "34ef9e90-4179-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.57.50", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200064, "uuid": "6ce23855-415c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.188.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777161845, "uuid": "70ad7464-4103-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.231.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777196645, "uuid": "77287816-4154-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.231.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777178765, "uuid": "d5a6e9b2-412a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.51.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777193645, "uuid": "7b05fc09-414d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.1.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212365, "uuid": "109ca96b-4179-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.28.223", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777206365, "uuid": "18b25f6c-416b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.216.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777197425, "uuid": "47d24c2e-4156-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.220.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777205106, "uuid": "2a1dee32-4168-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.113.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212245, "uuid": "c92c6058-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.246.99", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777207985, "uuid": "ddf9dfed-416e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.62.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233306, "uuid": "d2c64bfa-41a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.138.16.223", "Tag": [ { "name": "45-138-16-223", "colour": "#397ae2", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233306, "uuid": "d2c63cc1-41a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.138.16.51", "Tag": [ { "name": "45-138-16-51", "colour": "#c72901", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233306, "uuid": "d2c646e5-41a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.154.98.122", "Tag": [ { "name": "45-154-98-122", "colour": "#a30209", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777218185, "uuid": "9dba3a8f-4186-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.166.51.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199946, "uuid": "2666c457-415c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.232.75.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777234686, "uuid": "0979ff9e-41ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.209", "Tag": [ { "name": "45-88-186-209", "colour": "#667f8f", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777234686, "uuid": "097ae25a-41ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.92.1.43", "Tag": [ { "name": "45-92-1-43", "colour": "#6ad31b", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235225, "uuid": "4a9e977c-41ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "48oni.rax3vomen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777244106, "uuid": "f830c11a-41c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "4ppcd.nov2sirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777240026, "uuid": "780bfe39-41b9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "54lzq.tov1maren.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243443, "uuid": "6ca7ae42-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.252.114.171", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777161725, "uuid": "28ef6419-4103-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.105.203", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777234687, "uuid": "09888a0f-41ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.110.47", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777204625, "uuid": "0b70ef8b-4167-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.58.190.87", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777247225, "uuid": "3ac615d4-41ca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.37.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777205584, "uuid": "473c424b-4169-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5ob0.qiv7moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203968, "uuid": "83965201-4165-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5pruc7-mount.qiv7moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777242365, "uuid": "ea60a57e-41be-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5ynt46-node.kyl6varet.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777202046, "uuid": "0a21585e-4161-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.22.58.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777189623, "uuid": "1dcab5bb-4144-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.126.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777183207, "uuid": "2d8911b9-4135-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.79.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212245, "uuid": "c927c843-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.3.23.156", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777226407, "uuid": "c2b8fb8a-4199-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.206.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777168745, "uuid": "812e70d8-4113-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.214.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777195447, "uuid": "ad1985c6-4151-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.44.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777169406, "uuid": "0b1da0f0-4115-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.45.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777197365, "uuid": "242131f2-4156-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.55.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777180985, "uuid": "00d9a8b0-4130-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.60.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212305, "uuid": "ed657c5b-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.83.18", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777191726, "uuid": "02e29f82-4149-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.108.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777210566, "uuid": "e06f2614-4174-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.236.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777210085, "uuid": "c1ad5119-4173-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.89.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777189505, "uuid": "d742fa7c-4143-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.92.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777190345, "uuid": "cba31479-4145-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.167.169.176", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243206, "uuid": "df9d5924-41c0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.212.184.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777202046, "uuid": "0a20863d-4161-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "68.185.152.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777244773, "uuid": "85aedcb5-41c4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "7xekivp.nov2sirel.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231746, "uuid": "30bb2d98-41a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.168.95.185", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235825, "uuid": "afff4941-41af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.54.33.157", "Tag": [ { "name": "84-54-33-157", "colour": "#ceb1fa", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235945, "uuid": "f7656469-41af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.54.33.214", "Tag": [ { "name": "84-54-33-214", "colour": "#36bd74", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235885, "uuid": "d3a61c82-41af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.54.33.71", "Tag": [ { "name": "84-54-33-71", "colour": "#b26f9e", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235825, "uuid": "afff5788-41af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.54.33.77", "Tag": [ { "name": "84-54-33-77", "colour": "#b12170", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777246026, "uuid": "708699d7-41c7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.11.167.177", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777226111, "uuid": "1254cdb4-4199-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "8ltu2.vel7ramon.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243865, "uuid": "68870722-41c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.188.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777247106, "uuid": "f43775b0-41c9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.241.243", "Tag": [ { "name": "54e64e", "colour": "#eb829a", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777240384, "uuid": "4dbd5159-41ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "9al62yq7.souf1atwindow.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777241765, "uuid": "84b32b0d-41bd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "9hq5.kyl6varet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777219686, "uuid": "1c9bd25e-418a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "aa5sf.vex4moral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777172045, "uuid": "3031f216-411b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "acti-cmf.zexon-plus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777176307, "uuid": "1c589a10-4125-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "aguarw2y.sylonix-web.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777181048, "uuid": "26389867-4130-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alph-qhj.mivon-hub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777207207, "uuid": "0e293376-416d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alphsummer.zex2liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777218125, "uuid": "7a43b800-4186-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-rnetr.pav7lorex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777168808, "uuid": "a6b68341-4113-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ami-mfs.qivon-store.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777177145, "uuid": "1011479b-4127-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "amic-po1.sylonix-web.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243806, "uuid": "4571ae79-41c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "aps.voltpanel.cloud" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232888, "uuid": "d9408e73-41a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ark-valeen.zun5larek.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209007, "uuid": "3f866d77-4171-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkmesh7al.rax8pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777240990, "uuid": "b667e6bc-41bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ax2e.tov1maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200306, "uuid": "fd47fa91-415c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bajbvqgz.dex4lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203845, "uuid": "3ac4e6be-4165-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "beautiful-roentgen.176-65-139-130.plesk.page" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777198986, "uuid": "ea6a0ba3-4159-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bin4ry-trail.miv9soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777230670, "uuid": "afb5c508-41a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "boos-gri.qor9mital.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777184290, "uuid": "b2b11c90-4137-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "breagc.dexor-host.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231511, "uuid": "a4c7b672-41a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brigh-gold.qor9mital.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203126, "uuid": "8e0c42dd-4163-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "calm-spool.bexla3rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209370, "uuid": "1791ee08-4172-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cargoquery.rax8pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777181946, "uuid": "3dcbd79c-4132-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "casa-zw9e.mivon-hub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777242725, "uuid": "c121f027-41bf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl1e-panel.kyl6varet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233670, "uuid": "ab6e6beb-41aa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clustchoru.zun5larek.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777204332, "uuid": "5cb8ed3f-4166-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "compressout.qiv7moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777234870, "uuid": "76c36674-41ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "creehid.rax3vomen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777182607, "uuid": "c800273b-4133-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cuer-e30q.mivon-hub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777228808, "uuid": "59a643d9-419f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "darcymotors2.screenconnect.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777166344, "uuid": "ea73aaa0-410d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "day-g6qh.bexlor-net.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777234692, "uuid": "0ccc252e-41ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dibzyqjy.zun5larek.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777186985, "uuid": "f94729ff-413d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynline6os.miv6soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777180330, "uuid": "7abbb9fa-412e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "eart-l4.noven-sys.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777202714, "uuid": "985c5d74-4162-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "echogate.bexla3rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777226947, "uuid": "045d9537-419b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "edit8-grid.sivla2ken.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200486, "uuid": "682dbd0d-415d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "empty-violet-63e1.maskify.workers.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777161727, "uuid": "2a37c6c8-4103-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "enfa1p13.mivonex-serv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777165025, "uuid": "d7df658c-410a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "estrqmi.dexon-node.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777176065, "uuid": "8c840105-4124-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "etab-0d.sylonix-web.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777162207, "uuid": "4831ebb8-4104-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "etaknqgp.mivonex-serv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777169584, "uuid": "75aea10a-4115-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "etoi-fbll.qivon-store.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227190, "uuid": "953def87-419b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "etomoidomen.cfd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777216625, "uuid": "fbff3112-4182-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "exposerv.pav7lorex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777183873, "uuid": "ba5256b3-4136-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fami-wp.dexor-host.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777224613, "uuid": "95024d86-4195-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fembiq.vel7ramon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777169884, "uuid": "2870196a-4116-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "filo-8ao.qivon-store.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777167545, "uuid": "b5fefe94-4110-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fine7t.bexlor-net.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777172410, "uuid": "09b6ba65-411c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fire-02k6.raxen-tech.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227316, "uuid": "e09e2e58-419b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fldenmd.sivla2ken.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777163047, "uuid": "3cc9f2f9-4106-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fleuytfp.dexon-node.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777218905, "uuid": "4b099396-4188-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "foplq.vex4moral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777164067, "uuid": "9cd264e1-4108-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fore-k6mz.dexon-node.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777198509, "uuid": "ce3f3917-4158-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fre5h-logic.miv9soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777172765, "uuid": "dd48b535-411c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "freur6r.raxen-tech.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777170845, "uuid": "64caea89-4118-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fuss-kx01.zexon-plus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777197847, "uuid": "4344e746-4157-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "g4th-sheet.miv9soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777201146, "uuid": "f1a97a49-415e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gamecheap.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777219928, "uuid": "ac98b879-418a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-ca5t.vex4moral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777222751, "uuid": "3f41b0b5-4191-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gl0ss-vault.tor4nexil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777209726, "uuid": "ec06e1d1-4172-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "glolab.rax8pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777208525, "uuid": "204f65d8-4170-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gr1m-index.zex2liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214645, "uuid": "5ff72b1a-417e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "happytugsbakery.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777239365, "uuid": "eddfe5f2-41b7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "harbquarr.tov1maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777241165, "uuid": "1f2b9d50-41bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hen1a.tov1maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777245131, "uuid": "5ae050bd-41c5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hglj.nov2sirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777174150, "uuid": "16b0dc68-4120-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "homb-1h.raxen-tech.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777181468, "uuid": "20b59c90-4131-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "homm6uc.mivon-hub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777179850, "uuid": "5c317678-412d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "homo-ph.noven-sys.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777216926, "uuid": "af56393b-4183-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "insivisual.pav7lorex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777211165, "uuid": "45a21f52-4176-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ion-cra.rax8pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199526, "uuid": "2beda0f7-415b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jloj7ws.dex4lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236185, "uuid": "86e1cc2d-41b0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kellithis.rax3vomen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777168445, "uuid": "ce79bdbb-4112-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "koerhl.qivon-store.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777169285, "uuid": "c2fa19fc-4114-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kopf-wkeu.qivon-store.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777228631, "uuid": "eff47050-419e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "l1chen-hold.sivla2ken.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777178526, "uuid": "473bc442-412a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "landem.noven-sys.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777179184, "uuid": "cf90f3b5-412b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lebe6wwf.noven-sys.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243147, "uuid": "bc94b0ff-41c0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lfixa2ax.kyl6varet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777165387, "uuid": "aff0368c-410b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lichxz.dexon-node.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777216385, "uuid": "6d387180-4182-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lightinn.to6varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199946, "uuid": "2695a6fd-415c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "loadtin.dex4lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212308, "uuid": "ef048e84-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "loose-bun.sylo1mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777206428, "uuid": "3e24b297-416b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lum-lineon.zex2liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777227190, "uuid": "95527bd5-419b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumennix.live" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233791, "uuid": "f3d68508-41aa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "luxzzc2servers.my.id" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777244411, "uuid": "adfb7c51-41c3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "m3rge-mark.nov2sirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777162325, "uuid": "8ec35de5-4104-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "manngua.mivonex-serv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777179491, "uuid": "8632818a-412c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mar-jlk.noven-sys.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777222991, "uuid": "ceb4e6a8-4191-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "marshform.tor4nexil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777174506, "uuid": "eb5d505f-4120-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mati-ns3w.raxen-tech.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777217407, "uuid": "ce44d1c7-4184-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "medi4-spark.pav7lorex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777176667, "uuid": "f3356048-4125-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meer-in.sylonix-web.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777163825, "uuid": "0c857861-4108-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mens-tu.dexon-node.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777229766, "uuid": "948b117a-41a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mer-lithor.qor9mital.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777240326, "uuid": "2acb75eb-41ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mernex1ar.tov1maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777225150, "uuid": "d555d2f8-4196-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "minorclosed.vel7ramon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777184707, "uuid": "ab6e996e-4138-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mund4c.dexor-host.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243385, "uuid": "4a04b310-41c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-rnead.nov2sirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777185668, "uuid": "e7fc3aa9-413a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neroc5j.dexor-host.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777237325, "uuid": "2e4a51d7-41b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "networkhub.syke8liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777218486, "uuid": "51021475-4187-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "norcorear3.pav7lorex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777171745, "uuid": "7d7cc769-411a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ocche0o.zexon-plus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777174924, "uuid": "e48c8198-4121-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ocul-xq7.raxen-tech.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777225749, "uuid": "3a796cee-4198-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ofdqgn.vel7ramon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777223948, "uuid": "08ae46cb-4194-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "okqgg.tor4nexil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777197485, "uuid": "6bab5c2a-4156-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "otter0-field.miv9soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777177565, "uuid": "0a417826-4128-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "paniwcfh.sylonix-web.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777202048, "uuid": "0b8348a8-4161-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "parcelquick.bexla3rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777211525, "uuid": "1c72d168-4177-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "peak7-frame.sylo1mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777173847, "uuid": "623bd1cc-411f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pes-ghj0.raxen-tech.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777171385, "uuid": "a70b52f7-4119-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "piedmg3.zexon-plus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777167785, "uuid": "453ec186-4111-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pieqt.bexlor-net.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777238707, "uuid": "661a8407-41b6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pixel9-layer.syke8liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777166045, "uuid": "37fadf5e-410d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "plag59o.bexlor-net.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777164726, "uuid": "25c982ca-410a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "poditt0j.dexon-node.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777186626, "uuid": "23313c6f-413d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "primeshore.miv6soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777180685, "uuid": "4df7eb77-412f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "proc-256.mivon-hub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777213205, "uuid": "05802dc0-417b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qkkrhea.sylo1mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214406, "uuid": "d14a9e17-417d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quarrytrav.to6varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777239725, "uuid": "c488dbe0-41b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quor-valeix.tov1maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777242186, "uuid": "7f6b6e96-41be-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quorcresten1.kyl6varet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212726, "uuid": "e7ccc3ef-4179-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "r4vxeem.sylo1mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233249, "uuid": "b0f4e5e9-41a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "railspark.zun5larek.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236546, "uuid": "5e262909-41b1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "resolvercultur.rax3vomen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777213866, "uuid": "8f789fe1-417c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ridgegentle.sylo1mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777217765, "uuid": "a3ac0e78-4185-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rklpwx.pav7lorex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777231266, "uuid": "12f7835e-41a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "royapuls.qor9mital.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777215065, "uuid": "5a5dc700-417f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "runt11-drive.to6varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777223714, "uuid": "7d34c22d-4193-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sand-tar.tor4nexil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777214049, "uuid": "fcddf818-417c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sandbhar.to6varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777220647, "uuid": "5996082f-418c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sermarken.vex4moral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777226467, "uuid": "e69338b2-4199-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "snovv8-mesh.vel7ramon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777170308, "uuid": "24d9589b-4117-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soci-84i6.zexon-plus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777202048, "uuid": "0b7ff029-4161-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solflux6ix.bexla3rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777237985, "uuid": "b766a1bf-41b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soundatom.syke8liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777175406, "uuid": "03a61f75-4123-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "spia-vo.sylonix-web.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777199171, "uuid": "58675d3e-415a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "st4ge-pulse.dex4lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777212131, "uuid": "85669905-4178-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "static-host119-30-117-248.link.net.pk" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777235764, "uuid": "8bb048fc-41af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stead5-switch.rax3vomen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777205106, "uuid": "2a2a05b8-4168-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sthj.qiv7moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777178227, "uuid": "9516e577-4129-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stra-j2.noven-sys.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777207328, "uuid": "56531dde-416d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "studi-fores.zex2liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777202407, "uuid": "e1a7c359-4161-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sub-h11l.bexla3rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777183450, "uuid": "bdfe1201-4135-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sunhq.dexor-host.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777243744, "uuid": "20772538-41c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "taldra2ex.nov2sirel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777201091, "uuid": "d0c41c91-415e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talnexos5.dex4lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221125, "uuid": "75ef7e2e-418d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "temmodul.vex4moral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777165745, "uuid": "85192152-410c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "terr-53p.bexlor-net.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232050, "uuid": "e621c650-41a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tfoq2qdi.qor9mital.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777221845, "uuid": "23379307-418f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thor-hinge.tor4nexil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777210206, "uuid": "09ce687e-4174-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tigmjuy.rax8pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777168145, "uuid": "1bb8950b-4112-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trab-7t.qivon-store.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777171025, "uuid": "d03f60d5-4118-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "travb7.zexon-plus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777167067, "uuid": "9948fa69-410f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "treexw.bexlor-net.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777234691, "uuid": "0c2b7e07-41ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trinexa.zun5larek.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777225328, "uuid": "3f7deb58-4197-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ughckpku.vel7ramon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777186385, "uuid": "93b1aaec-413c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ultra-enzyrn.miv6soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777239064, "uuid": "3afd90ad-41b7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "uxmidt.syke8liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777215607, "uuid": "9d2d0403-4180-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "uy2qx.to6varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777200727, "uuid": "f80b29f1-415d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vaultink.dex4lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777232406, "uuid": "ba7cf422-41a7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ve1ve-loop.zun5larek.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777238345, "uuid": "8e3df823-41b5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vel-draex.syke8liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777241407, "uuid": "af2d7452-41bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vfge.kyl6varet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777233791, "uuid": "f3d5c4e0-41aa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vmi3229260.contaboserver.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777208170, "uuid": "4c8ed914-416f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vocalatomic.zex2liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777185365, "uuid": "33dada60-413a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "voit-wjw.dexor-host.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203546, "uuid": "8823e8e5-4164-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vorline5is.bexla3rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777182967, "uuid": "9e7294f8-4134-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "voxx1.mivon-hub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777222145, "uuid": "d63181cb-418f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vqq7jll.tor4nexil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777230191, "uuid": "91dabc83-41a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warm-senso.qor9mital.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777236965, "uuid": "578ee0d4-41b2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warmcon.rax3vomen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777228027, "uuid": "88071dc8-419d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wildsai.sivla2ken.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777229407, "uuid": "bebdc26f-41a0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wo0hv.sivla2ken.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777203850, "uuid": "3dc2bab8-4165-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.176-65-139-130.plesk.page" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777229111, "uuid": "0e762f8c-41a0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xzgik.sivla2ken.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777220826, "uuid": "c3d9112a-418c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zazsvrye.vex4moral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777205948, "uuid": "1fede6be-416a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zenmesh9en.qiv7moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777210628, "uuid": "055da28d-4175-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zenmeshix1.rax8pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777211885, "uuid": "f27b49a0-4177-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zentideor.sylo1mer.in.net" } ] } }