{ "Event": { "published": true, "date": "2026-03-06", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-06", "timestamp": 1772842524, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "518e1e41-6547-4fe3-8098-e2059443055c", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1772759234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759234, "uuid": "056ce5b1-c4f1-4848-bfb9-b281ff907f08", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759234, "uuid": "6701bcdc-bcca-41a7-8277-5d598ff78a0c", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759234, "uuid": "b8eb84ba-bf3f-4113-9b1d-5554d43b8664", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759234, "uuid": "9ab1f45e-6910-4580-b262-c8ddf98821e0", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772759234, "uuid": "c2923638-e2ca-443c-a695-ccc94217348a", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff0364fd-c193-11f0-85ba-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1772759412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759412, "uuid": "603fbce3-11a7-46df-9640-c6caf20226ae", "comment": "Malware payload (CoinMiner)", "value": "aaa5098c9caafccf15362b017825c64b", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759412, "uuid": "0d78dc15-091b-4a6c-ac1b-8917b6540c62", "comment": "Malware payload (CoinMiner)", "value": "59c29436755b0778e968d49feeae20ed65f5fa5e35f9f7965b8ed93420db91e5", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759412, "uuid": "5b4a8a13-8608-44e1-b2c1-9f89965149b5", "value": "T18B9533D309864BF0BFA2EF3451585D86EA60EE744B7CB2B8F3B0A27436436E5E1604", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759412, "uuid": "e27a6954-9806-416d-b9a0-1417d313ab38", "value": "49152:EpCKabVQ+9qlNlpjN8H8JZGtucdfFY91ujYIQ+:fBqnN8H8HIazujYIQ+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772759412, "uuid": "06b60c30-be08-4166-b208-2ec3b584b529", "value": 1880264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759412, "uuid": "9db89b1b-c6b5-4333-8b8a-197a93cdd32b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c7fb763-c1b1-11f0-85ba-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1772759412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759412, "uuid": "c117d9df-c13c-423e-b8d3-b85bff1dc604", "comment": "Malware payload (CoinMiner)", "value": "ebbf199c7813577f72daa241d9fb3398", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759412, "uuid": "13aa5cb6-80ee-4b99-bf9f-0ebb51131f43", "comment": "Malware payload (CoinMiner)", "value": "048e374baac36d8cf68dd32e48313ef8eb517d647548b1bf5f26d2d0e2e3cdc7", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759412, "uuid": "da0cc5f5-483e-45a6-b481-d0b305e46a65", "value": "T1378533346A465C25267B0FF4809531371CEB3AF7210AE5864E8E7CDD821561A92BFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759412, "uuid": "1514f5b8-432c-4cab-a0e0-0792b7186ec4", "value": "49152:1LtoMxTuZCBqOoEVx8y9y3p3EesY603jBY:foMxTSIqOXVxfqp3Erj0zm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772759412, "uuid": "751f4cf3-5c47-40bf-85fe-a26a06f8f7d0", "value": 1748196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759412, "uuid": "4e77b28d-71f4-4b19-a9cf-59607cba83f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef1309ad-c1b8-11f0-85ba-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1772759412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759412, "uuid": "4befb9e9-0742-4009-a42a-c2db4a090918", "comment": "Malware payload (CoinMiner)", "value": "62802abcae18d915a106788308192def", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759412, "uuid": "ba2f3f1d-5796-44cc-abc3-28ac45f47784", "comment": "Malware payload (CoinMiner)", "value": "3625d068896953595e75df328676a08bc071977ac1ff95d44b745bbcb7018c6f", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759412, "uuid": "5c0415a1-a02b-4815-a857-0c3d6ed77661", "value": "T1E85533D67B8493DCC13CF099E908DC283CECA9248F776D04DE5148C63667BB58A58A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759412, "uuid": "a9fe7748-a491-412d-915b-cbcec7f772f6", "value": "24576:yaOwVvvYm3CwpbTqfb2tEZYclsK21F9vJLESiWiV5:y3wDTqfespsBfxJM/z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772759412, "uuid": "d5c335b9-a877-4958-9cfa-1e1b04506037", "value": 1299516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759412, "uuid": "edb09902-d466-4582-8ef6-f00e905e760d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1739fd1d-c217-11f0-85ba-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1772759415, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759415, "uuid": "1fa96414-f036-4d07-8447-7a8ed815b240", "comment": "Malware payload (CoinMiner)", "value": "a6cf2bb96f20979d0d35965551b13fde", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759415, "uuid": "76901d92-04e6-4840-b9e7-d4019593035c", "comment": "Malware payload (CoinMiner)", "value": "dbb7ebb960dc0d5a480f97ddde3a227a2d83fcaca7d37ae672e6a0a6785631e9", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759415, "uuid": "5328cc67-91c5-45eb-b142-c0787e45975c", "value": "T1E4753308476458F0F7A4E5888BCDACAE631AC95255F70F4ED4329CF35EC875336A2E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759415, "uuid": "85864045-e969-475b-8710-6955fede2461", "value": "24576:hzfEtBkjj8t0D/p5fAZ6LNnw3sXQyXQ9enZM/CTC2c/w9pwTRfkxZwFfV3h:hzKB8j8y/fvNn005geS/AX99SVkbwR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772759415, "uuid": "4833a137-e99e-4e80-ac21-04df96417db6", "value": 1560860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759415, "uuid": "fe34e592-c1eb-4e38-abd5-5153fcbed257", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca685e5d-1894-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772759896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759896, "uuid": "21dc4a94-7aae-44f5-99d6-8bec636f8756", "comment": "Malware payload (Mirai)", "value": "9c990bb2cf1e9b8cf75b2d0b86d15c10", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759896, "uuid": "40d506b8-b86f-4799-a031-7149852840cf", "comment": "Malware payload (Mirai)", "value": "4623975a463058dd63a84b13e48362d7bdf1d347e06c9e74c9e72d0ebb8d6c63", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759896, "uuid": "fe2e5ba9-6b41-4fca-a751-f493b0e1f49f", "value": "T14304D719AB550FFBDCABDE3706E9070539CC641B22A43B363674D528F54E50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759896, "uuid": "4f7b7df4-17f7-4155-92b2-d2f0cef9d594", "value": "1536:c/jMt1chsHcfnDq1etVfR0TKVzZ1paTEjuqvUNIx6Z8GhMna4lxVs8dpThT1Wtsq:wjMt5HW+0tVV6qvd6rUxVVpAKdw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772759896, "uuid": "02ba8846-d9a1-4ada-8d34-ed1d66639176", "value": 181852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759896, "uuid": "dd1e44ac-e5d3-4eec-9952-c13ccd0b7142", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40596026-18fe-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772761570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772761570, "uuid": "a173e797-8a67-4667-8d08-83f88ee8f51d", "comment": "Malware payload (Mirai)", "value": "e91dccd6d2a98519cffd0143d8111a54", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772761570, "uuid": "104ceec9-aadb-46d6-a42c-0dc6a2eece2a", "comment": "Malware payload (Mirai)", "value": "7b9ba082df5fd5dbcba73175f3bba57ddccef25fce1512c0708367bbd0fb3859", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772761570, "uuid": "5dcdd04a-8eb4-4390-9720-7d16814ac080", "value": "T1B3041905BF110EFBD89BCC3B45F9270529CC581A62EA6B36B934C858B54B25F1AE3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772761570, "uuid": "9e9fcbad-c071-47f9-9f54-f2944a577428", "value": "3072:t60NrtUpT/5dltGgXGGP9M4S8lrXwU2wonacrI40fCtZ1SD39rsJj/s9fx49SY2Z:t3nEr5dfHPq7UToac8uF9X0V6B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772761570, "uuid": "4a59c8aa-1fee-479c-b9da-afab3ccf30bc", "value": 179916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772761570, "uuid": "b2545d55-5773-412d-8471-6965113b87ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be24bdd7-18ff-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772762211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772762211, "uuid": "286f137b-4870-4ea6-aae5-54987c7f04d5", "comment": "Malware payload (Mirai)", "value": "c6821b2704978127d31cebdf9c10d95f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772762211, "uuid": "06e76d57-6888-4c89-b3c9-c0b8269800eb", "comment": "Malware payload (Mirai)", "value": "d9fda712b503c08e2a93db8fd7699dc935fae8e497682bd67dac8fc0f384ea63", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772762211, "uuid": "abefe6dd-5687-4007-b1fe-0d0121cbf932", "value": "T15004971E2F228F7EF668873147B34925A75C23DA27E1D644E1ACC2105E6439E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772762211, "uuid": "7ca66e20-f5cd-4398-a074-f3871ebe1bb7", "value": "3072:BqaTaALobli1JqT65VPhONhWD4KXOUjnH:7mAopiVAhxKX3jnH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772762211, "uuid": "8d99e69e-14a2-42d2-a8cd-f77fa284bab7", "value": 177756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772762211, "uuid": "a74c5cf9-081e-4553-860a-8e2151d1be4b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecc7c25a-18ff-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772762289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772762289, "uuid": "fb6f63a0-888e-45d6-8bbb-4f9c8914295f", "comment": "Malware payload (Mirai)", "value": "e5eb776367d69089c847972b9b22b852", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772762289, "uuid": "2c175606-dfec-46df-b9c5-65a53e8e2e10", "comment": "Malware payload (Mirai)", "value": "0d8132bdedb562bf7dc10a1d7e81607ecb4d090ed96bf1a118da4e1084504845", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772762289, "uuid": "b9ed2989-b045-44cf-847f-c5bd9103665c", "value": "T198E44A55F8C09F62CAD56576F65E82683313477DC2D7F30689188B383BA78AE0B3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772762289, "uuid": "938d888f-9571-4e8d-88b5-53694f043a45", "value": "12288:glwOAUlS0XpX3WW/dMSD8dbyqzQr4+f5qevQXfW6pZTbkvVFAOEHh52:gphjmdbyqY4+f5qek0VFAOqh5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772762289, "uuid": "c33d04cb-4935-4f84-be80-7495089ae5f6", "value": 717168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772762289, "uuid": "30069de8-bada-4209-b3c7-864858e73fee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772762420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772762420, "uuid": "c2c049fc-17ee-4efc-adec-c4ae9bded934", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772762420, "uuid": "735ef273-dc9b-408a-8360-2acd88bdd5dc", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772762420, "uuid": "bd6b4bc2-5ce5-4fa2-8976-21c1507d8e1d", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772762420, "uuid": "2212f0a0-a2d1-464a-b563-4541ba30cf00", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772762420, "uuid": "fffbad65-ee2e-4b4c-b23e-e16690f17d48", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bf55c79-1900-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772762422, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772762422, "uuid": "8c8befa4-92df-491c-ada1-6e7d40261d9b", "comment": "Malware payload (Mirai)", "value": "a2b58c193298cdd45bb91256c1438591", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772762422, "uuid": "e2b07876-d502-4f47-bc2a-4babe5749ab5", "comment": "Malware payload (Mirai)", "value": "39d68839e8a19b23d13e68bae166b5ae36596fe9831decaf68d5f1d1e2f1588d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772762422, "uuid": "0fb44aa8-65bb-488e-a85d-d9e488fad687", "value": "T1C6D35C0673180E17D5A349B02A3F1BE083FEE5D121F0BA89691F9B6A8676D371485F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772762422, "uuid": "9f1de1ea-7407-4294-8a03-bf698a625c15", "value": "3072:CV0zui1ZhMHJCIqWrpP7OUK3y0uMg9FkiH:LP1Yiwd7OUKC0uMg3kiH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772762422, "uuid": "d8fa25ac-c8d3-4c4b-9a13-ef9a8b02be10", "value": 134336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772762422, "uuid": "d4f41fcd-8b30-4e6d-9a53-3e9372bdbf6b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c90b6aa-1900-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772762530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772762530, "uuid": "2003669a-bbb5-4c9b-ab37-c4129c0355b5", "comment": "Malware payload (Mirai)", "value": "8382c75d2af1b602a9935c8fc79a178f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772762530, "uuid": "be96172b-cec2-49fd-981d-c3e9a4e78513", "comment": "Malware payload (Mirai)", "value": "fd78729bffc56f9801c75072511c81bc29c530d05af5b614dcde352b6f1dbf5a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772762530, "uuid": "b070d026-2aee-4de1-9257-7b9a3c960531", "value": "T172E33A55B8828A22C9D513BEF92D018E331327A8E2DF7213DD205F2577C7A6B0D77A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772762530, "uuid": "c75ff17c-9c7e-4336-9833-46c7e15c7529", "value": "3072:8NMcOPLZDozjefDoHwreWu1gSa0lI7TEy6KuImkE:IOBozje7oHWuOSa5F6K4kE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772762530, "uuid": "5b05dad3-6d6f-48c3-abec-aac6ba527f08", "value": 145552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772762530, "uuid": "71912f10-d314-41da-9893-780f82b5fd34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1b3bc7d-1900-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772762592, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772762592, "uuid": "b78f36a8-37bf-4ace-b955-a06ae15fb304", "comment": "Malware payload (Mirai)", "value": "67bfc8f21a1fcd140e1f9294dd5fd280", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772762592, "uuid": "65f6ac6c-1d8d-4f49-ad95-8efe081a93d2", "comment": "Malware payload (Mirai)", "value": "b7b86adb378b1c9dd37e9b34327be1c54b1ee44e122b12d6c73ea1eb49fb9913", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772762592, "uuid": "388614b2-67f2-40a3-a892-152651c1cbb3", "value": "T1E2D34A2275391E2BC4D0A87E22F74361F1F167DA25A8C90E7EB20D4FFF252206547A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772762592, "uuid": "cb918b47-50fe-4b03-9ae8-acf05d4c9a50", "value": "3072:lCldeCsOs9kzj2vV4XcZgqniE230IO1BlsT3j0A:APeCK9kzivVYQitymTT0A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772762592, "uuid": "6a739808-3412-4b87-9458-5669154c9590", "value": 140776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772762592, "uuid": "827eaea2-c372-476e-97b0-8b46164b799d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1ea06ce-1903-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772763881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772763881, "uuid": "77c27ae4-e317-4d3c-bf98-57704c9a8d8d", "comment": "Malware payload", "value": "fd75cd1fcff7e10e201fcc5608d618c1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772763881, "uuid": "2c8dbf6d-5740-4250-a58b-54a061ffa7bf", "comment": "Malware payload", "value": "19008f7eb0e4bf618e4ffe0c0c8936ed472f356f0d2203a534a32a6312332d7b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772763881, "uuid": "3777d97a-9df3-4ed1-81ab-3ccbbd841ba4", "value": "T11E8308327588582A210B028FD263336C70EFD8E2D611E5B6F6F922344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772763881, "uuid": "d8369026-ac20-47d8-b644-8e1f7c3fef91", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbn3WabVN/:XEKltp9t2SX/yr2pb3WiVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772763881, "uuid": "16e952e2-4f5f-4b76-a0e4-28614a431f86", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772763881, "uuid": "5897cdf7-33a3-4513-800f-72551c79be09", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f03fcde1-1903-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772764013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764013, "uuid": "6b976ebd-4c46-43e2-9f00-750366bd8950", "comment": "Malware payload (Mirai)", "value": "334be5764140c0ee6485abc163ff4c5e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764013, "uuid": "6ee6c5e0-2475-4cd3-bef4-e4a5c37e657b", "comment": "Malware payload (Mirai)", "value": "3b348dffeb399e4887968bcc4563a1ca1c1139238df72fb7e90e4c321097b4dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764013, "uuid": "6b94c2fa-a83f-4ce0-ae8e-006afecc2d8b", "value": "T1FCD31A41F9504F23C6D622BBFB5E428D372917A8D2EF72039D256F64378696B0E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764013, "uuid": "99de291c-b6ed-4daa-9549-591ad3e38cc0", "value": "1536:hFN2l4G58dxS6HauEl2wgAcW0AEGL4V5ilT6IJEJ4XVbOl1qTo9IYfJ+ILl8+wyQ:hFN2Ps3EutW0C46lZJEJ0yHaYh+9oG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772764013, "uuid": "f8a6f6bf-ef0c-45b3-967a-dcebe0e57da3", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764013, "uuid": "40cd87c4-16a5-4086-b1a0-d12bc97d79d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "055cebf9-1904-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772764048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764048, "uuid": "e55b5206-5c1c-4607-afc2-120850f87307", "comment": "Malware payload (Mirai)", "value": "a45831942181d111b5cd41c9e4e37ade", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764048, "uuid": "0323b003-d96e-4032-9c1d-220d6c8cfe98", "comment": "Malware payload (Mirai)", "value": "375b90f092061faa5842a013514d17dca2f9d1f326c73aaece02759875ae1fe0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764048, "uuid": "9e59d93e-281b-42bb-98f0-396fb429e5aa", "value": "T184343B45EA418A13C4D117BAF5AF418A3332A7A5D3DB7306D9246FB43B877AF0D636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764048, "uuid": "c604991a-11fd-43ae-bb0d-da36accfbe4b", "value": "6144:Ego/jNgGzHzakeqacEp1d4n1trkbf9ihM/9+AU:EDhgSHzakeqacE3W1e0G/4J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772764048, "uuid": "2e0d7ea7-8a87-496e-b079-081b616401b5", "value": 230976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764048, "uuid": "3fff0e32-cc10-456f-81fd-ba864fbc25d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06d206dd-1904-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772764051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764051, "uuid": "92fbe756-cae3-419f-a9c2-919eba4762f6", "comment": "Malware payload (Mirai)", "value": "4458a8e933bf613b765376bb60da1ed1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764051, "uuid": "a3cccce2-611c-44c6-94f4-afe3ae1834d1", "comment": "Malware payload (Mirai)", "value": "bf113dd0b032f4abd156a6fc9af4928463b3882e554eb1fea5b4df5885b58213", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764051, "uuid": "bcc2c65e-7d0a-487a-834d-d2cf07ef58d5", "value": "T13593E551BC82562BC6E423BAF6BE668D336577E5C2CF722BC8214B117B8551F0D63B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764051, "uuid": "1972142d-3c7c-41f3-8287-b262bed966fe", "value": "1536:PWrd+dC++zBz/dPXQL0u4WaJuLaVlW04brj9uYpMNGY2LYghb:PO+d8zBWLac0yMNGFlh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772764051, "uuid": "a31dbe22-9b82-4086-b4a7-4cd8f11a5a15", "value": 93804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764051, "uuid": "991276b0-cfc4-4252-9836-52e46fd45f3d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b6da4e7-1904-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772764085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764085, "uuid": "f0633d38-4ef6-454f-91c6-db4cd125490b", "comment": "Malware payload (Mirai)", "value": "10e6300783cac6a7fbbb1cb4e32f16da", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764085, "uuid": "f5150917-3338-4043-9eaa-3f298379dabe", "comment": "Malware payload (Mirai)", "value": "58fbacdd6055f8f1672d64ec83dba0b46efd2acf4da846cf7fed28fd15042f96", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764085, "uuid": "883f4425-ec9e-490d-bdfe-4d161a7fc77b", "value": "T15BD33B07B6D180FDC4D9C2744F9AF13AED33B1695238B16B2BC4AA171E89E309F5D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764085, "uuid": "eec2d3be-e243-4440-89a5-24439fd79244", "value": "3072:+Kzk/bIs2eUkmx9nBYZPRZ9tIX5gDCCuD3pIE9fu8vB:+Kzk/bIs2eUkmfny6lZM8J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772764085, "uuid": "ea10d17a-25f9-4a9b-96b7-b51ec659b48e", "value": 141288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764085, "uuid": "c8d8557e-6671-4e45-aae3-68184ed9dff4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c102d40-1904-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772764194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764194, "uuid": "73f165c7-e194-400a-a651-f4e92c7ef6d0", "comment": "Malware payload (Mirai)", "value": "83392024be5503e1199de47b3861fee1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764194, "uuid": "7a4488fd-29aa-4a9d-8c7e-305fa6dfd882", "comment": "Malware payload (Mirai)", "value": "c91035ab5f3df08bb8e83b3db25edd5ff7f874d9c591677e2ecc48531a10df90", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764194, "uuid": "9a29dc93-ff35-46c8-8237-1b20dfe2bf38", "value": "T1E4935CC0F783E5F1EC5701B5A137E3339732E039502EDA56C369AA27ECA2550DA1A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764194, "uuid": "e13f31e0-ec91-46ac-9a35-dc074c27c77d", "value": "1536:tr6dfMqjhWebH868H0zAeVq/Lv/EL6c4eW+JIptgv49SQflbsg:trifMqtWebH98UzAeVq/bC6YW9tD0Qll", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772764194, "uuid": "e9ef42c2-f1f9-42ca-aa6d-a0271cc96922", "value": 92812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764194, "uuid": "fe436900-8a5b-4fa4-b5e4-36f9e3b86ca4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23df789f-1905-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772764529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764529, "uuid": "12316848-7c87-4de7-bd3d-878661ce2417", "comment": "Malware payload (Mirai)", "value": "8718f0e2483c058db8330e588e9a1605", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764529, "uuid": "da0b06f9-dd80-4ae7-838d-684a2eceac76", "comment": "Malware payload (Mirai)", "value": "91621d0c2c33c6108dc9c6b49cd081a5bf3f6c50f3f75dbb6be80c7332f2accf", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764529, "uuid": "66d2dd35-7e18-468c-adc0-87370e0cae15", "value": "T1D2C39E32D8396DC4C1945434F8B1EE711FA2A5C441A25EBB1AE5C97900C7DA8FA0EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764529, "uuid": "ab64427e-d5db-455b-ba1f-df07cfe52535", "value": "1536:iaZwsA5XjVZJK0twtfXd/GW25UhMMJNu5xWKQk0kaXN7Y+UKigHcYSQwKprlzwwD:if5Z5Z98XdmVMJa5aX7biySQHrMwES", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772764529, "uuid": "1a2adf01-bf1e-497a-84d5-0a2be63d3084", "value": 120332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764529, "uuid": "6c1e389c-3400-4fb1-95fc-4d5ec3bc94fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27fc6d3c-1905-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772764536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764536, "uuid": "6c3c0d1b-a448-4774-ac87-0f0d3b06894a", "comment": "Malware payload (Mirai)", "value": "db6ff3b76df4fa32888c46de985d6fb4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764536, "uuid": "f8fa9a30-f5d3-4601-a603-43bf656e0fe0", "comment": "Malware payload (Mirai)", "value": "c0e572bb278fb7f035665a52ef03ddee2d482b6b29573fad1697c8b66355b7c3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764536, "uuid": "b4aa16bc-76f5-41ff-9ebb-0643681d4198", "value": "T17804D719AB550FFBDCABDE3706E9070539CC641B22A43B363674D528F54E50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764536, "uuid": "2d5ec560-feeb-42ea-8e59-44c2ba3226ef", "value": "1536:c/jMt1mhsHcfnDq1etVfR0TKVzZ1paTEjuqvUNIx6Z8GhMna4lxVs8dpThT1Wtsq:wjMtTHW+0tVV6qvd6rUxVVpAKdw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772764536, "uuid": "4031c4d6-5e26-49f3-9b8f-f6544defc305", "value": 181852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764536, "uuid": "534e060a-94ad-4407-a41c-7efb40a75f10", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772764639, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764639, "uuid": "0ef61be0-cc47-4c29-a1b5-4364b49ecd90", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764639, "uuid": "5a0cfb84-a7ac-49b9-96e6-fc628e19922d", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764639, "uuid": "2134fdca-f2d1-4697-85d1-e35a8c987ee3", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764639, "uuid": "ac905031-3d09-4ba5-be5b-214e536c9a69", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772764639, "uuid": "35b69a47-8fd3-41c3-9a8e-c14ba8fd0412", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1772764640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764640, "uuid": "1cb2bbe3-1cc6-44cc-9378-9b0314034ec6", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764640, "uuid": "2b6a0c3f-a769-4312-b4b1-f46b0b38a029", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764640, "uuid": "2969389b-eb4f-4df9-9f7e-8217a041cbe0", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764640, "uuid": "7ce88765-e200-40dc-beb6-ec28dafae83b", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772764640, "uuid": "b0a2f316-c685-4c17-a772-eb7247028f93", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "140be688-1908-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772765791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772765791, "uuid": "a10a8d5f-01cd-459c-8ff5-b227ea9e6b11", "comment": "Malware payload (Mirai)", "value": "455f9003685b08a93fc7c973ca09edbe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772765791, "uuid": "c10fce56-58f4-4afd-86cb-81328363f87d", "comment": "Malware payload (Mirai)", "value": "95a484f81ee370a6ab3432286b9052df39dab9b9b9a078bd854a02234b2d858c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772765791, "uuid": "363bdcb3-5dfb-440b-ab25-b9996fcf66da", "value": "T162E30A46B8819B12D5D111BEFE1E128E33231B78E2DF72029D246F64778A9BF0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772765791, "uuid": "42e88d1c-3111-4899-8a90-8a5957523c55", "value": "3072:b8S5KURgw/PXuxMte/aSyuBwSQm9T+cDmbtZ:bj5KKZPXmMtwa9uBwnLcDmbtZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772765791, "uuid": "5b057e37-aa50-449d-ac5d-25deac389ee1", "value": 146268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772765791, "uuid": "86707be6-bc5f-4592-b824-34822f58c8e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7beccb34-190a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772766824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772766824, "uuid": "e394659c-f3e4-44c0-a4ee-5710bc748e9c", "comment": "Malware payload (Mirai)", "value": "0d743ab91910850360107221526d2d25", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772766824, "uuid": "50cd91a6-d470-46a9-93ed-c735624b10ba", "comment": "Malware payload (Mirai)", "value": "bac8eaae693e2d7b18b917d8c52e00eeefdc9bf1014b324a0b1ab16b7f3e13ef", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772766824, "uuid": "9e274759-5aff-428c-8ec1-e5fd2e56cbcf", "value": "T1A8D33851B9829A27C5E123BFFA6E018D332563E4D2DE72178C215F217BC691F0DB7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772766824, "uuid": "d42bb7c6-f89a-41b7-af78-a9e04408efae", "value": "3072:snFif7apx6XS+kUgpjWXQQKMs0u29wzulziQSc:sn8ZS+dQWXQQK5s9TeQSc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772766824, "uuid": "edf195c6-8772-4737-9736-cadcee747715", "value": 140756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772766824, "uuid": "873aa264-e0c6-41a5-8c51-0c09d50084b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2bfb75b-190a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772766943, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772766943, "uuid": "dba9afc6-2182-413f-8b92-a2ca177bb267", "comment": "Malware payload (Mirai)", "value": "09d8de8902ac92200824a0e81a944f2d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772766943, "uuid": "fd1be009-31ee-4a1f-aa64-44cae4f0d83b", "comment": "Malware payload (Mirai)", "value": "0675fbff70f3a74eb40e1434e0e9550aa98393d529692946db1bf9b2529fb8ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772766943, "uuid": "f61e353a-acce-47b3-9ace-36b11aa57091", "value": "T13FC36CB3C8666F58D559D1B4B0608F792F53A91182871FBE2977C2B68083D8CFA053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772766943, "uuid": "6e788988-1c9c-4d60-b20a-55ea54f5aa3b", "value": "1536:75KpJ/jGeQvZzZXn0FyCucKsEYoeTiT6Hk9pAWvuoFPocdOsn:75EJLGe+0Fy3DsHiGUpAW2QP3OG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772766943, "uuid": "828edcac-7a14-4c4c-a6a4-05448c5349f1", "value": 121664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772766943, "uuid": "c0bafa5f-369d-4499-8213-5a5829d6b028", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2dc668b-190a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772766997, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772766997, "uuid": "f5f6757b-9c54-47eb-bf86-c4c6a188fc7f", "comment": "Malware payload (Mirai)", "value": "389b35caf751497f377103983eb27268", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772766997, "uuid": "1b3fd09e-5940-4b16-b07f-a6ca745d17d1", "comment": "Malware payload (Mirai)", "value": "7fc132b9b986683ae456c4d31b98427008584d9b0ff05684804419c7bb5ae585", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772766997, "uuid": "f25f7c83-5100-42a5-95d8-fe20c66f1e23", "value": "T146C32902F98584FCC0CAC1340B6FB63AA976F1DD1238B2EB67D4AB123D4EE615E1D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772766997, "uuid": "a6896128-3b7c-46a4-8fac-5a06730c9e8c", "value": "3072:e483TghM/1weZbcnITO1yosFAIxnJdhgpDb7BeyPBupmzQUAdojgaR/XN:eH3TghM/1weZbcnITeyosFAIxnJdhgJZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772766997, "uuid": "1571c493-e48d-4795-8b81-6da9632c9562", "value": 125472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772766997, "uuid": "f7852352-dd1c-47cd-bac7-8f9a9ee436dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23abb05a-190b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772767105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772767105, "uuid": "2e43302c-116f-48b3-984f-3152ed429eef", "comment": "Malware payload (Mirai)", "value": "bb73c96692a3b2becc1d8f9a14d8f35e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772767105, "uuid": "4381066c-0081-40d6-aad5-02af7b5d6bdf", "comment": "Malware payload (Mirai)", "value": "126bb7fe59f613f236a4e007a19b4952241162b3af3f8a41e1b2faefd6746f67", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772767105, "uuid": "7917ad2f-9f9f-4cc3-ab2e-60fdf8867e2a", "value": "T10EE34D8AF802DE7EFC0BE57E44670D15FA30A7613243172D529BFDA3AC321A65D16E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772767105, "uuid": "1c1edaa4-4083-4398-85a9-68c06f0d1a97", "value": "3072:luWypdcGShA/TtPq6ND6ZJ243nxl9XzrTmduH:gCGShArdDPAxl9TmduH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772767105, "uuid": "f472b650-7b65-4187-bee9-b068b71ebb10", "value": 146888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772767105, "uuid": "ed20be38-5e69-4797-9dea-c9861629414c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc44c58b-190b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772767388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772767388, "uuid": "6b449968-83d4-429b-82b6-a99de5ae3932", "comment": "Malware payload (Mirai)", "value": "917e4ecaf26683cfa36fda7899ce8e67", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772767388, "uuid": "72eda13f-babd-48c3-94db-49ca924ef732", "comment": "Malware payload (Mirai)", "value": "2967f78d71dc4c0f29f1a4b8c2dd40cb0a2db03ed09e4fb0c577e7f5ea0299ae", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772767388, "uuid": "a1987395-5065-4493-a83d-a0a0f6501e24", "value": "T192F3B50E6E198F7CF79987344BB79E32965833872AE1C582E16CD7105E6024F641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772767388, "uuid": "6bcec54b-7d80-4c7a-a804-40bd2c042c43", "value": "3072:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJBQX/uw9EfszRpSP/Q4vkTTzTT4BFZDiwZ:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772767388, "uuid": "d4b4eb7c-562d-4a5b-9fff-d38c0ffb7696", "value": 171724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772767388, "uuid": "695d676b-ba4a-4a1c-a097-50a0d7e5b488", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ac6aedf-1924-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772777828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772777828, "uuid": "7913ae1e-16db-4c44-870c-920ecebdd78f", "comment": "Malware payload", "value": "b595afb8ab2c4ab2ee7dc4bf1b256002", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772777828, "uuid": "cb4887b5-cd3e-4dcf-9324-600df75df5f4", "comment": "Malware payload", "value": "1d501c439b40ffcf1239a6d575b04ce0fc5dea2bf399f01b9957293ba4293e18", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772777828, "uuid": "e4af767c-fe3f-44af-9a0b-c3af5bb58fd3", "value": "T13644C6077B919EB7C89BCD3306FA860110CEE45726A56B2B7774DA1CBA0B90F49D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772777828, "uuid": "cdca6a52-dd07-44d6-85dc-b51ce12e8d42", "value": "6144:n/dXObJcq26/6dFOzvXaLXJmAOWGhoYSf3U6LwIMr:nFCJL6dxJmAOWGhoYSf3U6LwIMr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772777828, "uuid": "dee73adc-b173-4d38-9e9f-b94a3d3f5cf3", "value": 260802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772777828, "uuid": "fe3543e4-6c56-4c99-b70f-4e59ce1f2942", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04df538c-192a-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772780368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772780368, "uuid": "94e090b4-e07d-49ff-a051-f039d9ac6df5", "comment": "Malware payload", "value": "0d2f44a55a3bf01adb87aeb62f123763", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772780368, "uuid": "4e4944b0-662b-403a-bfc5-c1d6cb8e09e5", "comment": "Malware payload", "value": "ae32e067024f1f90fb36ee7ef97e3d134eb947de482c47c6f9b63a52e1f8dc57", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772780368, "uuid": "2f53a591-ef88-471b-9851-b93e1af16d91", "value": "T1C193093274AF052A166F436E80427B1CEBA982DBC601DBE8F4FD51595FF4D8932672", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772780368, "uuid": "8c2b1842-e359-4959-9d37-c06b3b9da08f", "value": "1536:pXyp1xQ/uwMmAIa14oXs/I8epeV7tb73WAxCJCStkb5fvnw05S4jrmiHPsCZKg6i:pisIbzEStkbFvnw05S4jrFPsCZD6Y/7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772780368, "uuid": "b6561ec1-1d4c-4942-a393-b35fd01288da", "value": 96308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772780368, "uuid": "f5036eff-3d4b-48a0-9ae6-4a01a71ba204", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42952eb0-192b-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772780901, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772780901, "uuid": "82cf7e16-af72-44db-a50c-5bca92515204", "comment": "Malware payload", "value": "fceb246f1e7caaaa4812ad2d3affa74b", "object_relation": "md5", "Tag": [ { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772780901, "uuid": "4bbe74b8-8114-46bc-933d-d033212d6f4e", "comment": "Malware payload", "value": "063d873135bd8f341b072732846df689e464e081dee3ebc94d95d69cbb3a8ba8", "object_relation": "sha256", "Tag": [ { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772780901, "uuid": "da6e9612-1e6f-4466-adbb-10aaa410f7d2", "value": "T170C080F55461440BF332359079D63600860D4527F8830C10D1C03CFC9554E5EC4C73", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772780901, "uuid": "d916e8a8-29e9-44ba-98fe-a7c6606108d6", "value": "3:qVZxVsNjJMzVJu+1zWNVYYG4Q+ruhLAHuQacbV0YTnLRWksG45EBbZ6iF4:qzxVkMRJVCNOYG4Q+SwuFijLLRzsG45P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772780901, "uuid": "36cd8e34-549f-4001-9473-19d835633478", "value": 172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772780901, "uuid": "c8d1eb85-da03-4f04-8b6e-5c6e2d4276e8", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad7279fd-192b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772781080, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781080, "uuid": "034eb7ea-d82e-434c-9f31-b7526986133e", "comment": "Malware payload (Mirai)", "value": "995eadb4c672b09f2acf57654f18c05b", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781080, "uuid": "1855ffac-c163-4589-8d08-6a08e87e973d", "comment": "Malware payload (Mirai)", "value": "2cfdca173c2cf8cc5a12827385f6bb6d69ba5b690084784806aa868989686d3b", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772781080, "uuid": "b42dfe7e-7182-4b86-8033-7a94959d225b", "value": "T1E2F30946F8818F15D5D256BEFF0E128E33231B78E3DE72029D245B347B8A86B0E7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772781080, "uuid": "94c30aa8-851f-4b52-9bd3-3e8d67c77bbb", "value": "3072:uhdez2TTkhbUqwClsfg3aOAz+M6+xJnJRNnCshypTBH:uQ2QxRsf6aOy+MVnjEayplH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772781080, "uuid": "22b14acc-261d-4b95-861f-f25a8308a575", "value": 160796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772781080, "uuid": "0dcd9eab-2194-4b57-a9e9-82b184608b77", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cae1a9a1-192b-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772781130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781130, "uuid": "dda66f30-c04e-494f-b304-b59bc0445762", "comment": "Malware payload", "value": "7dc703a36b3c7fea3f42c7546577a225", "object_relation": "md5", "Tag": [ { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781130, "uuid": "3c0051ce-6e75-4510-a6e4-6db6ca728f93", "comment": "Malware payload", "value": "cfb26839493b9ca09171f21fc6a9c5c65aaf570e347749993e03068cb41895b8", "object_relation": "sha256", "Tag": [ { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772781130, "uuid": "d554f7f6-8c90-4370-9824-8e00c43accaf", "value": "T1E9D533618CE57E37C81BF4FC9A8E45408EB8B5363E4BC1CA4F6BD16CE5A4A8633105", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772781130, "uuid": "f1e928e0-17e9-476f-bfbb-ad5c9ec1c21c", "value": "49152:zo4V/nebjNY7Pk0moA75AugbYB3vIl966qgi0pC7VIo0Zh5/idQbFW3XOCgxEsPl:zrebxY7cOA7qugYB3Gcgi0paItZhMd8T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772781130, "uuid": "822b59ea-3e56-4f3d-8945-1883eeb7becb", "value": 2907699, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772781130, "uuid": "3ea49b60-6877-46c6-be99-d21d5192b520", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f08b06d-192d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772781862, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781862, "uuid": "b63576bc-9643-4a2e-acd0-4e053ee31b87", "comment": "Malware payload (Gafgyt)", "value": "9fd2f1ca392011a3ac418b5ce40e64d8", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781862, "uuid": "e482f587-3f59-442d-aaee-a720dc3f36a5", "comment": "Malware payload (Gafgyt)", "value": "4e9fb4f793e7fed2a3a601b821ce802ecad9680ccea906ac2c495c9af65cfc1a", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772781862, "uuid": "9908e6ac-ab54-4cb5-8309-52917fe98fc9", "value": "T130F34A1BB4C180FDC8D5C2B44FEEB216DA72F45D2238B25B27D46E262E4DE205F6D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772781862, "uuid": "d43d583d-1b93-483f-8b64-4a282177f99d", "value": "3072:XmwAM7GeyDW+GvdXTAmDfh80JCUvYvJSXMm/gm:OM7LlvxXbZsU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772781862, "uuid": "ea831290-6733-4ba8-a97e-22f3460c8fbd", "value": 169928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772781862, "uuid": "a509c28e-079b-44e8-8c4d-664a25df0206", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "910e30f5-192d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772781892, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781892, "uuid": "14642d82-6b8e-4972-a501-c30513d5d4d6", "comment": "Malware payload (Gafgyt)", "value": "348b4e4314a2a25d5f6381905a7e99f7", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781892, "uuid": "ff8e620f-19db-4dd6-9c0d-e3ce1649fdaf", "comment": "Malware payload (Gafgyt)", "value": "28bc04d07c184e0f86b16dc23d1e627d24f3d0a6d1098b819b35d9a0ef4af4ce", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772781892, "uuid": "afb75c7e-dc8c-48da-9ec9-059e55c5a8d5", "value": "T15BE31A45FC509B26C6D322BBFB4E438D772A17A8D3EE320399255F21378A95B0E772", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772781892, "uuid": "e68481fa-0bc6-41b3-8e60-b21457cf3695", "value": "1536:Ig7d+/+VafoNsiejzw4Ng5jRclHAZpo/AD21ATkdhNVfCOMVPZxqXiHzlB6wyw06:IA+WVafoYjcValHLA0A8hvQYSNksT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772781892, "uuid": "042c533d-28de-45ab-ada1-27357d364cf1", "value": 150208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772781892, "uuid": "116fd18f-dfde-4333-affc-1d2d8017c925", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b728b8f0-192d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (AISURU)", "timestamp": 1772781956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781956, "uuid": "52022572-5ba9-4f39-9717-76ca21f962e8", "comment": "Malware payload (AISURU)", "value": "97335ec368b037969046950c823e3061", "object_relation": "md5", "Tag": [ { "name": "aisuru", "colour": "#af35c8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781956, "uuid": "a74408a0-060e-4fcc-84c0-4a8f15e2cd7d", "comment": "Malware payload (AISURU)", "value": "7500925a26cecd84ebed2914855cdf0812a18661e1bb6f3c91dede36f34bd7f3", "object_relation": "sha256", "Tag": [ { "name": "aisuru", "colour": "#af35c8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772781956, "uuid": "fb947cd6-a185-4597-94a4-53906c312f57", "value": "T110C30859BD819B15D5D626BEFE0E528D33131B6CE3EE7212DE145F2027CAA5B0E7B0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772781956, "uuid": "ea137d9f-acc5-4106-87ea-f6ed870ead35", "value": "3072:jv/Itvfw1nYsSSIr+Chk/qLtGkaXQkgJn7cZ5gKuxU4pMY:zItv6nYsSxr+r/m4kaXQkgJn7Q5gBU+3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772781956, "uuid": "3e906559-2f55-4a19-8c0a-d650b4e10e1d", "value": 126076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772781956, "uuid": "8994d6ef-332b-43b8-9914-8b9f879ec8ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07381744-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772782090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782090, "uuid": "6785e7d4-297b-4156-90d8-281ad746f309", "comment": "Malware payload (Mirai)", "value": "fc20698e6cc42cbea449bc7c3c4cbd8d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782090, "uuid": "1daab90a-7ef9-4c9f-86ed-90a4f593a0bd", "comment": "Malware payload (Mirai)", "value": "de861c9cea03153de855afd6866f95fbcbaf393eb89cc874585201264410e64a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782090, "uuid": "1536b2e4-0016-4643-89c1-39326595c677", "value": "T1C3B32A4AF9819B12D5C922BAFE1E518D336357B8D3EE3202DD14AF2437CA96B0E775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782090, "uuid": "783bdeb1-30de-45f5-825a-55435609cc96", "value": "3072:M3M+i6tNOrShzLxNuWQzmdlHalGC37j4wDw9ysUJpa:M/TOrSR30wlHalGC378wVu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772782090, "uuid": "c88f58dd-1370-4bb5-80f2-e931a60a73a3", "value": 108044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782090, "uuid": "b3d71044-46d0-410b-b0d7-3008504ae4d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07433cf6-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772782090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782090, "uuid": "7f85b9ce-8cbc-4eaf-90af-95a55066fc75", "comment": "Malware payload (Mirai)", "value": "ebbd361c3e6943eabcb322bba5da8197", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782090, "uuid": "e434dc05-082a-4d94-9e10-d112e24d165a", "comment": "Malware payload (Mirai)", "value": "8033721d48f43261486b402afc26f22e0de686f21d94ad46f2f11ebda780defd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782090, "uuid": "14fbada3-eb72-4184-bce8-2ca44fc61d65", "value": "T1CFE0CD7EF4175428B55A5D48F919D4409D43DD130320BD68AED7CD72F1485987033B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782090, "uuid": "0da98cd3-8b61-4798-b52d-fee1d9c67c6b", "value": "6:zXeVfgkOYPeDywuMFXWR+XdI3gHd0LSflbhgkh5ty:zOSJaf6/XdI3g97fldgWS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772782090, "uuid": "4990a538-2fec-4ee8-933b-5ce5f7234fd2", "value": 298, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782090, "uuid": "580a975b-8561-4ea8-8ab9-7d83d603a9fd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a70184a-8bd0-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1772782096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782096, "uuid": "c34f5beb-ba61-4b8e-a084-6e25919f75ab", "comment": "Malware payload", "value": "0adb9b817f1df7807576c2d7068dd931", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782096, "uuid": "78c0ca5a-c6ce-4bf9-87d4-2fd97a0498e8", "comment": "Malware payload", "value": "98e4f904f7de1644e519d09371b8afcbbf40ff3bd56d76ce4df48479a4ab884b", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782096, "uuid": "250ab99a-a013-4e42-893c-99fad0dd68bd", "value": "T101158C0373918062FEA7A5331F5FE7265B7C6D2A0323B52F13981E79B9701B1162E6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782096, "uuid": "f3e72760-8aa4-42a7-bf24-46297f3d0ad4", "value": "320ca66b1e2d6a8f09a00d80e9a99bad", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782096, "uuid": "9868ed80-d7e8-4500-b373-445c7783e7f8", "value": "24576:fYgAon+KfqNbXD2XJ2PH1ddATgs/u2kaCB+l:f37+KSbq5e1diEnHaCK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772782096, "uuid": "88bc0dd6-d4c7-484d-b571-2a946c30faed", "value": 947288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782096, "uuid": "ac8cfc76-dd35-4aeb-9552-f68953c6f08b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f6bb133-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772782104, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782104, "uuid": "058baf11-485f-44f3-acd9-c0c9bb13f444", "comment": "Malware payload (Gafgyt)", "value": "22a6c15ca9fc85e5f9155be3cba96ee3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782104, "uuid": "aa47a913-0690-4e1e-acca-ecb97146bcfb", "comment": "Malware payload (Gafgyt)", "value": "5bdc31fa48b8e5c8ab2f2c603af63f454b4190dd73e0dc3c8fd65c7746fa29b0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782104, "uuid": "6a619e12-3c75-4304-9957-8d6712531d27", "value": "T188E34B0AB4C0D8FEC499C1744FAAF5369971F4195234F5AF27D8AF622E4EE201F5EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782104, "uuid": "ecae2f0c-adb8-48b3-a840-51acd02c34e9", "value": "3072:J0hKs/9ydD3XNzGYYTBCG+iaSPXra9ECxazy+oH1:uhbF+HYbN/r5oV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772782104, "uuid": "953df050-bf42-4817-a188-27ac68a24f79", "value": 155816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782104, "uuid": "23ea5b6e-cbb6-4daa-b2ce-efd7695cced3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2991608d-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772782148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782148, "uuid": "036aa4f4-0f80-4788-896b-fb812b4ef476", "comment": "Malware payload", "value": "ba8138df7e0c33c568b8444323f7e387", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782148, "uuid": "3543a43a-691f-458c-b00f-9a754bab2356", "comment": "Malware payload", "value": "3fd08e667f1c50944a5594bd05cbed0272ae0b35ea4301ed60e96dab302ee6b8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782148, "uuid": "214f8479-2b60-4ac7-9da7-fcc989c6ba6e", "value": "T11034121E0619C3ABC57FD67D600C0B938CE24154922BD6B7980A134F46DAB66FD4EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782148, "uuid": "c29bf669-6bdd-4a06-a5de-6fb95ec278f7", "value": "6144:/OJtNHl1WMQ0k5U05weA8q04sHGDkiKNg:/at/4wk5lwbp05iD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772782148, "uuid": "51c6e29c-7e1e-490c-a18f-770ce6cc8922", "value": 247244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782148, "uuid": "9d279027-1712-491b-a985-37944b23955f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bf1f30c-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772782152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782152, "uuid": "37fb13fd-9d00-49a2-97af-8f2a72919f92", "comment": "Malware payload", "value": "4d7c9a1de72f208533f1a50a110a3c0a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782152, "uuid": "865502b9-0904-4a0a-b7a3-9145db0d2ec7", "comment": "Malware payload", "value": "6ec2aec3151feaf7b4c6c7934e7ad601cca984266f0604b93676ae698ffed738", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782152, "uuid": "96a2a13d-3de9-41aa-928c-f042f64c41b9", "value": "T1535601C5BB88E92BC077543286A997B651474D0B8E83DF43A914360C2DBBAD44F1EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782152, "uuid": "eaf34ce2-a33a-4dc7-8b70-efd7332a0956", "value": "98304:l75bLNrZ3oXuk5KRPp1nNZw2fHZr3a7zpuKXc7eRDYH2TKBV5hH1uJSzf9a:l7JoXX09LRR3U/s7e5ISKBVfVuJSzf8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772782152, "uuid": "40b78720-c8f6-4115-8be1-8b11612ca85d", "value": 6221164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782152, "uuid": "723c2cdb-2be4-4a06-9c19-72305645065e", "value": "application/java-archive", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d6f60f4-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1772782154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782154, "uuid": "b4704ff7-77b9-4a34-a287-d0f91d6472a8", "comment": "Malware payload (ConnectWise)", "value": "10517fc7b2126763d306e26f9dab6b52", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782154, "uuid": "51c2db63-7d97-49eb-a652-1719d505abbb", "comment": "Malware payload (ConnectWise)", "value": "a789979fa5c689123fdb2b08088dc696ecc6b562ac372b273c2595a08f8624cd", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782154, "uuid": "a4341937-bb50-4e82-86f1-bc50d41e6bc7", "value": "T1E7D61201B3E69574D0BB0A38D87A9266AA31BD005716C7BF5794B92D2D33BC08E327", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782154, "uuid": "a2a1e896-4650-47d5-ae8a-8a85566b5851", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782154, "uuid": "0133a49d-b3ec-45a8-810c-572f5a3878fc", "value": "196608:7fefPqBn2hg5kEWmXhcfKjSVah7vGerBn2hg5kEWmXhcfKjSVJBn2hg5kEWmXhc7:RgdEEijLDGEgdEEijsgdEEijugdEEijv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772782154, "uuid": "ce8d03f5-7c99-4b61-aa8d-a494404f2bf4", "value": 12637240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782154, "uuid": "3d99736d-ce1b-4e0b-a3eb-4fbd01f1a09f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c06f30e5-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772782401, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782401, "uuid": "59dcb9f2-e33d-441b-8942-aefad8a88d0d", "comment": "Malware payload", "value": "53772ac1051e55d571e01f8a3b60c091", "object_relation": "md5", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false }, { "name": "Trojan/SilverFox.u", "colour": "#b4495a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782401, "uuid": "b9675dfd-bf9c-49e8-be5e-e7eb5859943a", "comment": "Malware payload", "value": "d7e749db95f091d57f072ef48b631ae352336c2afcac352f9ecd153e9e393755", "object_relation": "sha256", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false }, { "name": "Trojan/SilverFox.u", "colour": "#b4495a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782401, "uuid": "95ccf51c-e593-4c80-af55-7b0a6dc4d407", "value": "T1E04833478EC5303A9F8E13FB6561C5E3095F12F2464D9C43EA03AC4B67D026919AEB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782401, "uuid": "abdf0eea-1480-46af-bbf6-b554b85e1321", "value": "3145728:TdOqlZBgt1tD/SRwVfZbN1Xkzd8g5vZwyO6ZWBs:5OqlZBKdVhbN1XsagHFZWu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772782401, "uuid": "824a6410-ba2d-4d9b-a8ab-153d05e96a79", "value": 113228521, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782401, "uuid": "5c84ad98-eeaa-4be5-87e0-689309d30670", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "724e8639-192f-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772782699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782699, "uuid": "5507a67a-1ecc-4ea4-8c3d-45b84fa483cc", "comment": "Malware payload", "value": "8eb49c581df94b52407d20d0914abdb1", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782699, "uuid": "28d6a2cf-ea0b-49e4-bd4a-070e909f93bf", "comment": "Malware payload", "value": "44caa9cbb937f14c9b2a6c886d304709895c6280e692c33857d5c338d4208ef8", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782699, "uuid": "e23ed622-7546-4cb5-ac16-0f1fbf6c3fc7", "value": "T1A846AF13E2018173E52E1AB015B6573E5E788FA20E28C997D7E0FDF2AE73661C7661", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782699, "uuid": "4a8a542f-1d84-4905-ba56-d5560613948e", "value": "f9ab754bc9fa6a8282105e098246a54c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782699, "uuid": "cb49e45d-015b-45c6-b0e1-0065affa2bc7", "value": "98304:5rphr5F1a1dO6Ye7azXmH7US15JBAUZLU:F9FI186vA0JVY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772782699, "uuid": "0e845072-05d7-4839-8876-8cbab1a6357b", "value": 5373952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782699, "uuid": "d7c87d28-b798-4f68-9779-1b8de1f04f9b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5e48daa-192f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772782920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782920, "uuid": "2b98a33b-b187-4a02-8c40-99e580d01428", "comment": "Malware payload (Gafgyt)", "value": "83e8317a746f6bcb625456d181f42b1d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782920, "uuid": "ab22cec1-df1d-4abc-a43b-136f668c63b1", "comment": "Malware payload (Gafgyt)", "value": "eb75b1b90807d353ff7ae83e2ab8ed22ce3a58de604e4cc0fb8b1df40dcae30f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782920, "uuid": "0ad68524-f0ed-4915-8102-5f0fe837491d", "value": "T1B014D909AB510FBBD86FDE3706EA070539CCA55722A43B3A3674C528F54A54F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782920, "uuid": "93559a66-b88b-4052-b62e-9ada147e2c0c", "value": "1536:2M/noJoQEiJaFmNosgesLkcqeJytkCf7SmI+RNK1JZTZ+J2gfty8fczsim3MzY4h:2opqNos6V7INKJTUxbx3IQXZqYrY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772782920, "uuid": "0caba355-8daf-4a04-9253-a09d8b2178d8", "value": 203460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782920, "uuid": "23eee84a-c485-4244-9066-7cf869e58991", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6edda56-1904-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772783357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772783357, "uuid": "8cabf546-6579-4a53-a77f-0c146f70ab2f", "comment": "Malware payload (Mirai)", "value": "124a3af41b4eb8d5b8b3f7e7701dfa49", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772783357, "uuid": "66d704bf-1fcb-407d-a22c-a4c0e55df66f", "comment": "Malware payload (Mirai)", "value": "002755d98cede8bf9bb7fa3dd4665cb35aaa8ac3b7b3ad4a81befb64622cbe55", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772783357, "uuid": "cd0ab463-b9c6-4b05-b5e4-9d73fc5838d6", "value": "T16FB339C1BA43D4F5EC1641306177F73B9A32F0791239DA87E7A89E327C92A419D0A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772783357, "uuid": "04138ebd-bb41-468c-bd95-e940f8ed73db", "value": "3072:PbKW4dCLFaGFBu3/45g1rcV2w4zSr9bMFfln:Pbj4doYGFB0/45gdQ9uln", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772783357, "uuid": "74b295a4-e78f-43dd-8b2f-1a6baa44ed20", "value": 107824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772783357, "uuid": "867ba08b-ce90-4ac6-b258-d17ab42983f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80d358a5-1934-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772784871, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772784871, "uuid": "c0d5495c-c0a1-4522-91f5-9ea8f84a5b36", "comment": "Malware payload (Mirai)", "value": "ca71961966f17f85f9690eaa7257c2fb", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772784871, "uuid": "1f787ea7-4e09-4bfb-8988-aa60d6303cdc", "comment": "Malware payload (Mirai)", "value": "731f3adadeaa4d1f6991f85ee37ad082219c5f2fab61d70491a8054dc1c85e4d", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772784871, "uuid": "134ab55e-f56e-4283-bfe2-2d297128aaf6", "value": "T12AC3F705A9429F11D4D731FAFB9F429933536FA8D7F97102D9209F6023CA99B0FB26", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772784871, "uuid": "51da3dd5-3cc7-4faa-abaf-b8ad905d878c", "value": "3072:Q9dIRpVxelpK2I4bTAaGSRpuHTrh5OAtFZuSP+:QgRQK2hHAaGSRpuHPeAluSP+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772784871, "uuid": "c80a187a-9257-43c2-aca0-fe04f4a90751", "value": 126760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772784871, "uuid": "48dcbee8-25a2-4738-a6f4-675468b23e74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c96d3847-1934-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772784993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772784993, "uuid": "6c19ed0c-2387-4101-8b89-400fb95e234b", "comment": "Malware payload", "value": "3844b07fba805b9759ec79b150e7f0f7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772784993, "uuid": "c5817c83-adf5-4015-b11b-ba502cbae15e", "comment": "Malware payload", "value": "0d7b3f999c37973a90df55e533023bcd6f09586f7f1fd0a1dc4d45f775e4d733", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772784993, "uuid": "ddb73f15-1bbc-4e56-a9bf-b34fbfe7b766", "value": "T1DB24AC277A7C86AD7664B73C11B022C6306925838F141E3165BDA7297FB37326F29C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772784993, "uuid": "e7164ed4-da1c-4a48-a6b5-b14adce7f4df", "value": "6144:eAXf//r8zlwJlNeNA4skdETb/9QQzDKL/+vFaZeE:eAv4lgeA4sk6VQQzksFaAE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772784993, "uuid": "6e2499c5-057b-468c-8b14-942dc21449d3", "value": 223325, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772784993, "uuid": "a2ccbf2d-e468-4a56-9d2f-875e6b78c606", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee1f867f-1934-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772785054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772785054, "uuid": "55b406d2-9c78-450c-b5c4-ab296c0e0479", "comment": "Malware payload (Mirai)", "value": "a43171f099cc3e3e9039a1b22a8ae080", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772785054, "uuid": "49ec6369-233f-49b8-8d09-4666d2aa2759", "comment": "Malware payload (Mirai)", "value": "f1566911f42bf94e814c386594e7f709bac8c93436043eb4152060ffe2ef8f08", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772785054, "uuid": "ed2c3170-f044-4dc3-bb8d-6fdf6f43003e", "value": "T1CBF3F745B8519B17C6C616BBFF5E42CC772A1798E2EE7203CD256F20378B95B0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772785054, "uuid": "6c883b18-51a0-4a65-aa44-3b26e3e7058d", "value": "3072:pQGPwMS7OozH21Lun4j89dTRp4Znw081NO6XxtQK:pxPwMS7OozH21Lun4j89dlp4Zw081Nno", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772785054, "uuid": "a2e67860-7af0-4ee3-84c3-40cccf7ff501", "value": 164632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772785054, "uuid": "1e76ec40-bd0a-49d4-8f7c-d046fc9a21fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a137a96-1935-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772785316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772785316, "uuid": "93eb138e-3770-4d36-b75f-607298c5d806", "comment": "Malware payload", "value": "99cb0fa35e44a6e67f3e0a9183bd21c8", "object_relation": "md5", "Tag": [ { "name": "Generic", "colour": "#0dc42f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772785316, "uuid": "dd2a3146-adeb-4af4-822a-4db0c73297c3", "comment": "Malware payload", "value": "7ca7c64333d4b83b9faf0111032d43e04631a45656ab16e94b833082b3af6f7c", "object_relation": "sha256", "Tag": [ { "name": "Generic", "colour": "#0dc42f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772785316, "uuid": "e3b68b0f-2306-4415-882b-d5cd769bea42", "value": "T187F7335A7E604AB52FBB6F064BCAADC46114FBD49CB419CCB27E1EFC12053D4A1724", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772785316, "uuid": "2164bce5-0cb2-4462-a532-8e444245c714", "value": "1572864:pQYnIHP2RRspT0DwPm8JjzfGAopzsIzkqI+AO69pH37ANomZ:pQYnIOHMTRZzfGAUzzAO8pLp6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772785316, "uuid": "82f1a976-f143-4a92-b839-3e5f05a6969f", "value": 75441001, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772785316, "uuid": "595beb19-e44d-41f8-97cb-5b5f619c0ee2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eab0e8c1-1935-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772785478, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772785478, "uuid": "9c8ef723-2a63-48f8-8a53-b9ba4456a5b1", "comment": "Malware payload (Gafgyt)", "value": "4b67c8e016a7296c6bdc657433835a3a", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772785478, "uuid": "c117286e-fee5-4f40-ae2a-d8c75444f3f2", "comment": "Malware payload (Gafgyt)", "value": "83b01a2854cb4cdcf0e99fe6ee3c15f47cb72c4ccd17e30ab73825883b3afba2", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772785478, "uuid": "c0919543-ce33-448f-9eac-4d0a65050cc8", "value": "T17EE31B45FC509F26C6D221BBFB4E428D772A1768D3FE720389255F203B9A95B0E772", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772785478, "uuid": "95d88d41-24ff-4f05-9869-be56d6c256dc", "value": "3072:5JeBiqSN2QfJnwwAkyrVJO9s82Q+UIHU:bewDBwwAkEVJOW8BPIHU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772785478, "uuid": "36b71e60-57b3-441b-8494-de7009ca5cd8", "value": 146112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772785478, "uuid": "d0804405-88ff-4dcc-b60f-23bb486dad1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8361a02-1936-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772785877, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772785877, "uuid": "ab7f003e-77b8-4044-bed3-9acd3023af40", "comment": "Malware payload (Gafgyt)", "value": "66798bd48daf517243b13d841ef06b0a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772785877, "uuid": "d3916730-40d6-491a-b08d-2493a5eead02", "comment": "Malware payload (Gafgyt)", "value": "b95bbb3739a3cc10ade36a6ee9e86d38aef7e6562cb531b9ca312430ec34f68c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772785877, "uuid": "5fdcc02c-127e-4330-bc31-a2b7dd35a633", "value": "T12914A81E6E228F7EF66CC73447B78A30976923D623E1D644D1ACC2145F2039E645FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772785877, "uuid": "188cd42d-5e82-4474-9506-08b34071a132", "value": "3072:s5KGLhIDngYPmfYx8aPDDx6t54SlboRZA:s5KWhILgu+aAt7lbO6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772785877, "uuid": "881871c7-2491-4305-83a7-fd8dbe2fc075", "value": 199364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772785877, "uuid": "d4afb368-fe55-4d89-8763-6ba6cce50a7f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b5aec5b-1938-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772786526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772786526, "uuid": "85102346-a132-404a-aae1-c7ac0a7ec70d", "comment": "Malware payload", "value": "d4d7b0c75df9a3b3bca2dcc451884d16", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772786526, "uuid": "ddc6c5f0-f2b8-445e-a1aa-844302ab018d", "comment": "Malware payload", "value": "d9efde80761fc517f161691950d16e6fa9d3f6b3627dfb40b2e84561329b3f2a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772786526, "uuid": "6c034910-c07d-4c69-9292-fcdb6e39bdf3", "value": "T1EF24A75E6E228F7DF668C73447F74A34A75D23D627E1D684D2ACC1101E2438E642FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772786526, "uuid": "a99fafd0-844d-4b23-abef-c8bfa18c237a", "value": "3072:a/ZYD/7+1Mg1Omxz7sDfpA5f1qZxwpTUVsfqtMTeUxv9445:aazaM8fxvYpA91FEsCaTrv9z5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772786526, "uuid": "f512dfbc-6e9d-48c0-86a2-5d6e393992f1", "value": 225016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772786526, "uuid": "ad010e8f-2b43-4a37-9b1b-4ede2412cb39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3db05068-1939-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772786906, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772786906, "uuid": "79490374-d966-4f2b-a99b-a1054f37d143", "comment": "Malware payload (Mirai)", "value": "979998b15cd5be3c394801b8742440da", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772786906, "uuid": "0542d360-c8cc-4c4d-a6d4-ba9c8c3a9c75", "comment": "Malware payload (Mirai)", "value": "699b40606a134fdef5dd5ff6a5ee1de6ac351d2bb36dd4e731fbe7e53d0ccb87", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772786906, "uuid": "28bdd9fe-ae2c-4154-a41a-2bd40e7ebd2c", "value": "T19BF31795BC519B16C6C616BBFF5E428D372A1758E3EE7203CD256F20339B85B0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772786906, "uuid": "c70df610-99b4-46c1-800d-5ebc8b27dd21", "value": "3072:9/GP143xpXFi2ibsip8xI2V9jDs/4+OBWg+LwemLaGMW:9uP143xpXFi2izp8xI2V9jA/4+CWg+Lm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772786906, "uuid": "dff9dc03-22a9-45b6-a83a-8b40e282ad04", "value": 161080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772786906, "uuid": "32e2f559-209e-474e-9e0b-a93a06fb3395", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47d5cfe5-1939-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772786923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772786923, "uuid": "c205a39d-ea1c-4bec-959f-0c260d1a31f5", "comment": "Malware payload", "value": "cdec66ae72a9ca4a58a4036bb2b28e41", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772786923, "uuid": "eccc880d-eba3-4f78-801e-9a4a1c5d3bd3", "comment": "Malware payload", "value": "9ce3c49bc6d4244ebe59a837e01eba842b766f68780e3a9d83d7827089f2db62", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772786923, "uuid": "6a940291-c5a2-4ca5-938e-fa5d61a758d8", "value": "T10F24A60AAF610EBBD86FDD3706E90B4635CCA50722A43B763574D928F54A50F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772786923, "uuid": "5a13459f-89c9-4998-9580-ad68a0077bcb", "value": "3072:M47wz8e+Zbq8xl2uZQZ63PQG7HOrt4ua+49WXgFN:M47wu5qBuy6Bur5qEXc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772786923, "uuid": "a7cfacc7-04be-49ba-8bb2-ecd0a5a49306", "value": 228696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772786923, "uuid": "8a5cdb9d-693d-45ad-a59e-4a1ef0481bb1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e4acfaf-193d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772788759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788759, "uuid": "009cd410-39bb-4f7a-9fca-e457fe6b9a53", "comment": "Malware payload (Mirai)", "value": "d6ca54464876f052c06a87e723340eab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788759, "uuid": "b07cb1c1-6345-44b7-848f-c6ec6c982c4d", "comment": "Malware payload (Mirai)", "value": "c6eacc954db61745a632a7184c716f138e39201b3d572606949e3264d9e15493", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788759, "uuid": "b82d42db-a87a-4c5c-9cd1-b6561f308bea", "value": "T1A9835B22FD75193BC8C4A47761F74376F2F6438A24E88A1E7D710E8CAF646402297B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788759, "uuid": "21d00ae3-c86d-405f-b5c2-1783b3c4f362", "value": "1536:XhRLk5+YRoVvgOrVp5gi/Aow7bKtF01XNT5+GIQQihtTFmb:XhD3pbvwqnYXNNMJb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772788759, "uuid": "e812cd46-6723-4ac2-9954-7b9d5b58e82d", "value": 87496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788759, "uuid": "81fd7d7d-2b50-4fe3-b3c2-baf9a6c40ac8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8feea940-193d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772788762, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "58fcc8d0-7a9c-4819-83b6-96457689d069", "comment": "Malware payload (Mirai)", "value": "a2bfd09c8e57f2b3958a8a4f3c18ce42", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "19e178b0-5ad2-4465-989c-54c51c6cf556", "comment": "Malware payload (Mirai)", "value": "e53f3ae10f9e7156e0578493b3de2d61f44fbe9b4b712d12205899d01240737a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "b1137a3e-71d6-4689-9e1b-73edb1f40d16", "value": "T14903F1E9A1436E13DAB99DE04D6A46C2BFF18F8E36D00DC6620D6B566917C2272C9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "80b23196-2f36-4da9-9488-fcb9b334f828", "value": "768:K2U819nNz1p3DF1eRSrvjC9ydXc7nvsPJMhIo897QdXyGWR4uVcqgw0IC:Y819NZp3A2rcL02InGWR4u+qgw0IC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772788762, "uuid": "37b8c15f-c9fb-4bab-bf4b-9338f03641dd", "value": 39660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "3a9d9fdd-00fd-4dbf-a29c-b660ab313dd5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ff68600-193d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772788762, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "4d5a7fed-06ce-4f45-a94b-b453629bf16b", "comment": "Malware payload (Mirai)", "value": "d82f55cc4002f9e3356300f823dbe03a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "c8203c01-fc2e-4c3e-b41c-fb2f078f3836", "comment": "Malware payload (Mirai)", "value": "a7dd0c0a0e32d16e4ee92939f5d46cd6bc9cd502c47e07ed6f5e2ac91ac7d01f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "b680e01d-d5ce-4572-97b6-a9ce7741d67d", "value": "T19513F1A876213A75D93A4035152B0FD02DEE22D2F813CD933A44E956AF564FE3DE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "5656ffba-7bf2-4344-adee-bd6a1ffdb86d", "value": "768:KET7XP4xzJMIAvhvzhxn6fkDOCChBK2ggiKd1KvxEv+z6Ip4PHJgGlzDpbuR1JK:XTsxdJgvzPn6MDObHK2bd1mOv+zHp4PB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772788762, "uuid": "45f885f0-8ab5-4158-9363-8ad0aa4f8355", "value": 42692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "ee576b4c-ae8b-4a6d-954e-ccf7a60d6ca8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ffdd333-193d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772788762, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "2ae6c1c1-59ac-4d2e-9ffa-c875f100e974", "comment": "Malware payload (Mirai)", "value": "bcf4709e5392fa5241705d0412c98467", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "7e9abd8d-4cbb-40f0-8d5e-f59f65fadf11", "comment": "Malware payload (Mirai)", "value": "e4ccfaea72eb5c6e7b3ad40903de7e731ab8e270050328d476406a3ac9c71757", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "bcaa8808-3ab5-40a8-b82d-42ac25b18082", "value": "T107B3AE97F74714A0C8624AF007C34B9E2E2322128F97D9E76C1E7A3E5A794DB091A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "c5cdc4a4-cd92-4191-a717-863377825ec1", "value": "1536:iA5IbKtCwBgHSPR3JL+FjTWGbTQ5b1qklUv94QZJBxclog8oyf/LWK:JkKtoHM+FP1bEB1qkmqQZJjg+q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772788762, "uuid": "9d190146-d3c1-4809-bc1d-908483172e7c", "value": 116392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "c3a56f3d-011c-4144-8364-89dc928a3fad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ffe7a09-193d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772788762, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "a0375367-6b44-45f4-9aae-694594580655", "comment": "Malware payload (Mirai)", "value": "07d58afc18a9c0e054233da4425445c4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "d3696c24-d6ee-4f88-aff1-cdfcf38b0947", "comment": "Malware payload (Mirai)", "value": "239945186e89ccc7255beffce0d329061a3d2e472a2183aa4edeb04be5045cbb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "a4c31b3c-b815-429f-b720-bf0338428d7a", "value": "T1CB6302703719EC3A22A09D72FEFC8656566E09B1E2BB51331D60DAA93445D89248F3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "a29994f6-1a97-4409-b1ec-93bf80e1b37e", "value": "1536:xee5+Hx/E/1RMXspkac4fxCMLOLDzLJsP:xL5+R/O1dkiwMLO/zLY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772788762, "uuid": "d5770a79-ee41-4594-b0fd-faa5c293913e", "value": 67192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "4c494c3a-53c7-4d36-94b4-cda633a8402f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "900550d1-193d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772788762, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "6f3651f8-91e9-410f-8434-e2e03ceb12ab", "comment": "Malware payload (Mirai)", "value": "785188c7a47372fd697ecfe16eb04fc5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "826b114d-6c74-4d37-a5e5-fe3d68fc69c3", "comment": "Malware payload (Mirai)", "value": "7ee8d200e82863efdce56d079e13ca7069e3d955b7930d13d0b8652189cf5244", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "74fb4c7f-11ec-4c89-a82b-0cdff96ce7bf", "value": "T1A313F1292306DA65CF64A8381DBF0940DFA90F79C1263E36A518D83D91B055FB3BEC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "7180da6e-7c79-47c0-a764-8d3ca7126b2b", "value": "768:ZfG9274mM6q1eHs92/Z/3aYbgd/MCDmdxoDJA+9TIDvkTyhkU9q3UEL5W:Z+9Y496qkHsgB/3T80jouRDcyhkLk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772788762, "uuid": "f63eb3bf-cffd-441d-93d9-37bc41753ac4", "value": 43876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "00b83882-43f2-4185-a043-18bc3242f7a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90056797-193d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772788762, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "871fec30-b75e-4e9a-9643-5c4e2a9f0e69", "comment": "Malware payload (Mirai)", "value": "8f14584ef4f55894ef95c17419276888", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "74d082fc-ed89-4f56-ad4a-a235c353d9c7", "comment": "Malware payload (Mirai)", "value": "09d8b4a98a67b5df0e0a82488ec4cb305862d0054dfd43a2fd229f4d1a413d2a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "62746c76-7a58-4eff-aa36-2b23d0aa7808", "value": "T168B2D02062AA84B1DB614176F97447F742BE5AF8E3EE72305BA4064828C66CDB3BC4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "86a93f3b-571f-457b-990b-bef527013a8e", "value": "384:v979FDQ06u6LeuIYhdZJ+k7qPHZLlxxUyFJ/oSfpb9iV9+INJhymdGUop5hSK:C063eEh4tPH1lxFFJ/XBb9iaIns3Uozn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772788762, "uuid": "bd1680b6-4ac9-4509-bbed-dbf4a7bfdf44", "value": 23572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "d7209ea5-969f-4f7c-9c7c-ce94b06f6be4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "900bf9ce-193d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772788762, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "8619711e-aba0-44b0-8cd7-91fed6db89ca", "comment": "Malware payload (Mirai)", "value": "9708bfd0d68836f1719b1b07faacd218", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "b530a689-ce3f-45d1-9a70-0d45ac81bc8f", "comment": "Malware payload (Mirai)", "value": "608ee847563381ead73c06adb4e39b93dfffa5bb1604a7557800c6c2c2be3f7b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "7f12e206-53bc-49fa-b3b3-bdb404adc726", "value": "T1B903F25526A74D8BFE4CD1F6C17F23AF8D24D070D44888B9A361B07E6424FE82B761", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "f6c70b9d-cb17-4e7e-97de-2192b0a35e66", "value": "768:W7kCXLzAmwMq8Rj1ilR7BaV8uYhat+sLcXYkyB3sUMgucKbnbcuyD7UHQRji:W7DbzCgwlXuSacsgXKHtAnouy8Hy2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772788762, "uuid": "ee0bbe05-afe2-4cc5-929b-765c3c585cc3", "value": 40244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "6d2f67f2-02a0-4ec7-a43a-1c6c09f0c7db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "901e848f-193d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772788762, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "d88e4e7b-1248-4425-a478-fa2f53c4ab23", "comment": "Malware payload (Mirai)", "value": "7d465735bfe001f436ae0589e5e44424", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "c18ef91c-1acb-4df1-88a6-0c9f01e2d241", "comment": "Malware payload (Mirai)", "value": "27da0af2582b5ebc21961f174e6187f587160382c1d596a6a5db9bc424bb4cb2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "f8250d09-6019-40c5-8414-302338cce770", "value": "T1FB03E1D09497445AA174207A0D26E1045F32F628EA1DD4DDEBD0663BE81FFB17728B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "2aadafc1-a46d-484d-b1ab-eda20202cf76", "value": "768:X/39j9W3iSztmectrFYNKGichO3lOYIbHyQ6PTLDsSTnbcuyD7UHQRjQi:Fj9gzx7ctBYNKncU3IbHyQ63Qsnouy8w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772788762, "uuid": "d0368c88-ed25-4004-876d-1132cad2e3b6", "value": 39620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "a51cac81-bbba-4d70-9e40-065546cc800e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9045549e-193d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772788762, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "90cdb111-96c7-4b4a-9af0-ea0d4eafb715", "comment": "Malware payload (Mirai)", "value": "25b8353d2cde33a6841d69f5c528799d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "6c724961-8971-4fd4-b66b-f1ca88fb79f9", "comment": "Malware payload (Mirai)", "value": "6e6a3f89988d8cc017e706a5c41348cb404dfb145b95942d808e6752f844dd9e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "f0cb5396-8564-4369-83fa-ca79f2fe3011", "value": "T19E03F160C4EF920DE43D627944AFF20A0B45D41B5468A7F7FBD831B69CE2AAC099CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "35836c15-93fe-4e7f-8316-f08e3417fd42", "value": "768:6rDE1uLV+u1Q/bG0MYdoVkB48WZ9zzewpEHKBHjkPBnbcuyD7UHQRji:6rY1uL4u1Q/KqqVq79qBHjWnouy8HyO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772788762, "uuid": "0a027769-b39b-4af3-a245-a583a239b24b", "value": 38960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788762, "uuid": "18134c35-cbfa-4bae-b099-3e6d2e511745", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9072805e-193d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772788763, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788763, "uuid": "6e120186-e401-4591-8c7b-ff630e6a8491", "comment": "Malware payload (Mirai)", "value": "5055274fcddccd2d53ea5ef1dec50ba8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788763, "uuid": "b3ec0503-8c46-42cd-8676-67f353dcdb43", "comment": "Malware payload (Mirai)", "value": "43759864611d45b591cd2343833ce27d04aaba5d56cd82e251cc90c01713d487", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788763, "uuid": "215cc0d9-dc1e-4006-a1ff-eb9f910331bc", "value": "T1C213E1CEB2A87D89D9FD1A7E66E8273C0D4521A0675ED7C387024C6DE67590FB0083", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788763, "uuid": "948d36e3-af48-4970-a062-7eec860268c4", "value": "768:3/jFoKGhirlRa0dT5JY8P4iBE4KqpsnEjXPx698ace9LTCezCkagacWM:37WthoFqU4iO48a/UuxWLOezJr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772788763, "uuid": "f302a635-a5a9-45d7-9ef2-46a1babf03e4", "value": 43536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788763, "uuid": "56037931-2b76-4ed0-8595-863c5517516d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90a91909-193d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772788763, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788763, "uuid": "acc1b834-66e0-4bf0-873d-f753f4cdd210", "comment": "Malware payload (Mirai)", "value": "c1a96c23ffed6b452f1368db2929a031", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788763, "uuid": "63592840-1525-4145-a073-f9caf903d6e4", "comment": "Malware payload (Mirai)", "value": "51d91d601fae9db7b1f2cd184347e3ded3df5afb9174133eb1235adf5cc47925", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788763, "uuid": "0a23620f-340b-49f5-9ad6-b5fbb743acc4", "value": "T12B933AD7F400CDBDF84EDB7B44530A06B531E3A20A835F76625BB927AD361984933E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788763, "uuid": "f2d04845-8e79-4528-a462-b28ffbe5e3ff", "value": "1536:eGXP6gt/it/zX/HyyPATI9RoP128D0yJZWyKN8Nk4urDTbhl/TVcdNp81b:CtLX/fAT4RoP19Hw8S4snTVcd4V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772788763, "uuid": "35ded7d9-8c16-498a-ba05-c6a24d16a69d", "value": 90588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788763, "uuid": "5c8e1684-ffe4-4d39-a56a-86c57f838ac0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90b0127f-193d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772788763, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788763, "uuid": "01c979db-fd21-483c-b6ef-8c75aa65c6e8", "comment": "Malware payload (Mirai)", "value": "3de12a4ae378a138edc32557d004f1c2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788763, "uuid": "0dae7d8c-abd6-4621-ab15-0ac56418b673", "comment": "Malware payload (Mirai)", "value": "1c0d10315f2c1577a89c29f948fbc77b020283cbc7701758cd5acb662a5bc4e8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788763, "uuid": "f806d4c3-e232-4585-bef4-5c244c0df68d", "value": "T141739D63C8362D68D14841F071B08F395763A92285871EF758AACA79D087EFDF2163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788763, "uuid": "9c056ddc-20fb-4381-80ad-a19f9b5eaf81", "value": "1536:4t49SA5nI7L4KOL4d+eGU8C+AI6I9oKA:4tSjnIP/OleGU82I9I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772788763, "uuid": "2f7c8d69-1ca0-4380-b23f-bb6604ff5a46", "value": 75528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788763, "uuid": "acbe7292-f094-4f4b-b51e-bdd2534ee74c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90b688f4-193d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772788763, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788763, "uuid": "5c1419d2-f150-4bd6-971b-fb9f9cb6565a", "comment": "Malware payload (Mirai)", "value": "96145ee6dcb8648c2f4ad1469c90313b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788763, "uuid": "5c43462d-3afc-49f4-8385-f83d08c06daa", "comment": "Malware payload (Mirai)", "value": "7c42fb189cc6b9d2c4fb1ff06af42b540b0c195ea135c0d57f21c6641611425b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788763, "uuid": "cf575b8d-8419-4d12-9158-8c853c614ec2", "value": "T1EA03F15BCA56DD4B8BA4E830B86C64CA66D322B8E17E7967381A1278F6427040D71B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788763, "uuid": "7473d49d-ed91-49b8-b49c-3153f1b56d99", "value": "768:+G5CGcO/u4yEVLgSAWLax+xn/VV34uThJhmS8SOd3dXonqwNEcs3Uoz1s:jkGc+TK37Ex/VV3r6S8SeX/waZz1s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772788763, "uuid": "b5825422-35c5-43ad-bc4c-084d4b28fe21", "value": 40036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788763, "uuid": "2dfc9a68-3b3f-4b74-86e5-1abfffd977f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7715344-1941-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772790627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772790627, "uuid": "d2ede027-9095-42e1-bd01-c6b32c4a1e1b", "comment": "Malware payload", "value": "86bb6acefc7bc6ae8b35ce0ebba619c6", "object_relation": "md5", "Tag": [ { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772790627, "uuid": "b8776a13-fcec-4e49-b5c0-b38ff0d00cbc", "comment": "Malware payload", "value": "ee401ae9de8a50f3f0eab4810e49a1db94067f436daaeb9fe75e6de826ee7338", "object_relation": "sha256", "Tag": [ { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772790627, "uuid": "3ad700a0-c7d4-4b1a-9a07-5208403aea9e", "value": "T1F8F79DC2F89AB991C9DE9378AA66829EB3217C080F7463DB1640BF655F327D497333", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772790627, "uuid": "7108117c-66a3-4b2f-982d-8f5f5aa21968", "value": "786432:EXA7xb4NIcK4TPWkZYZ7bdnl0/zUf1VhwHSl:RxbuHTPdyizOUi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772790627, "uuid": "45ce3bf6-4a56-464a-a9d5-e000e0c78ef8", "value": 71268850, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772790627, "uuid": "c6295b80-6820-4c75-9af3-3021e0fb331a", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95253bae-13ff-11f1-8369-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1772797207, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772797207, "uuid": "b7d585ee-10ed-4030-b87d-3b018de12f52", "comment": "Malware payload (Amadey)", "value": "4a297bce61aaa3b15d5bcfc532fa6db4", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772797207, "uuid": "79be8943-21fe-48ab-900a-7119c0962423", "comment": "Malware payload (Amadey)", "value": "ab4a92b1b4fd0320e7a13519c8c2b8fa8a828ec56db52864dd70dc48061604b3", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772797207, "uuid": "ce11f0db-f88d-4920-aac1-aa65ccded07b", "value": "T11A24226301922667E52298741CD5470875E3DE7FE2A02005D2F776172E1F3EBEFAB2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772797207, "uuid": "47c76161-2012-492b-8cb2-e70690011d8f", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772797207, "uuid": "dd2bff3c-eb52-480e-a52f-5bcb6764035c", "value": "6144:DzpZjyqgdX/w7drhQZXveORMOqHa02FDz4+7cj:Dzf7gdPw7drSF3tq63G+g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772797207, "uuid": "3d3ed881-b2e1-4a8e-9731-5bc04477c9c3", "value": 219648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772797207, "uuid": "d9f08fc6-a82f-4419-80eb-41deaf1b685a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3aec6f3f-1951-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772797209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772797209, "uuid": "b9f56ab0-5f3d-4806-8a3f-65590ccfde2e", "comment": "Malware payload", "value": "2af34dfd3ea3a60ca273a81e07df3b22", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772797209, "uuid": "aa675fc3-6ca0-470a-a696-44bee681db84", "comment": "Malware payload", "value": "e9e4677d07e03e3e538b100038d2dcb4614b4159676f4875dc08139aa22d8b24", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772797209, "uuid": "571c5de9-0674-4a19-9790-ff5e57f25309", "value": "T13884A5FA56175A9F411A0F24E50C0304ADECEDABE3E6D1F1EF0E4DB69A5941848F0E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772797209, "uuid": "8b2884fa-2fbc-420e-81dc-9adc0729f54c", "value": "6144:PwUFoJT3XnOoLIL1vyaZLI/8BxLSfkA2VDQ86DNu6efkNsjKgKV7SggA4x2j:PPFoJ7OoL5/AksDQ82Nu6efTI7Sg5qe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772797209, "uuid": "2837801e-3fe2-4b68-988f-0b09585eb029", "value": 398680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772797209, "uuid": "7356e2fd-6473-40c1-b81e-386de25c7912", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0890e100-147e-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1772798709, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798709, "uuid": "70a56342-4c0c-441f-bfa3-36841b617275", "comment": "Malware payload (Vidar)", "value": "3569bb22ecae7f75c4ff6d612e090687", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798709, "uuid": "63b82480-5426-40b6-a3c8-a29e67a02ee7", "comment": "Malware payload (Vidar)", "value": "69c7b3654300bd7f94ba603da9be8f743442dc2e07504685a07f79f1cc318b4c", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798709, "uuid": "834688c7-564a-410d-bcdb-d0b01271d7df", "value": "T18AF4129B71F430E9E267427B85514601DB76B8708BB2ABEF479C83582F176D08F39B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798709, "uuid": "26a6c69f-d540-4945-bee5-e05d4ff4ed6b", "value": "469e59bd592f93ae01ff61cd0d813e4e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798709, "uuid": "fec8bd98-6b5d-4866-9a62-e14a81bfe55f", "value": "12288:Ir8VpxdYrFgkaW2MGCYhp3VRZIBLV6sCU11VosGfVUV9QdB0KKha+Qq:28VCLcMGfhp3VRyn61U11Vo5f+V9gIfj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772798709, "uuid": "6337a7ed-0484-4ec0-9eed-b47edb6dafb0", "value": 769362, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798709, "uuid": "7a3d50a7-09fd-4833-a138-879cda1cd3a2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "174520fd-15ad-11f1-8b52-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1772798710, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798710, "uuid": "55a3844a-6b3b-4d3c-8f54-c8087db2ed13", "comment": "Malware payload (Vidar)", "value": "b2432282eb0e0fddc785bdbbd4959198", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798710, "uuid": "9173e653-391e-4f28-95fe-81120044fab4", "comment": "Malware payload (Vidar)", "value": "299f253ef5a0f06b347cdfeab309c849cf7951a227ed4c13efb61ddf48c1c8e5", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798710, "uuid": "dfaa1845-bb9f-4610-a71c-ce03ba118421", "value": "T1C7C57B4B6CA409EAC46E93728DB342923B74BC490B3223D72E91BA782F777E05D357", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798710, "uuid": "fec07d6b-217a-4a8a-b7f4-d9669321dd69", "value": "ebc247a77b4d4a804b261f97a1fd075c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798710, "uuid": "bf05a6bc-89e6-4e56-81c1-81dd006bd617", "value": "24576:GHkak7V6sbwMbTpHsqNtPl+geBNZMlJIrp76E5rtVTrs5HVPvMiPgPte6Rbwuc:GHkaSV6sbwMbeqsgYw+d2yLXovUle", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772798710, "uuid": "aef56505-b5a6-4ec3-84c2-effaf97cdf76", "value": 2564096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798710, "uuid": "bebdc2c8-f934-4c59-884a-5e186b71dade", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ab3eea2-c4fe-11f0-85ba-82aee05be84a", "comment": "Malware payload", "timestamp": 1772798767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798767, "uuid": "dc08d298-910e-4c5e-b301-81d91fc180fe", "comment": "Malware payload", "value": "5bdafbd03a62b7905a0ae1ed26277a7c", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798767, "uuid": "8fee5c27-1870-4d25-9ba6-963d34a097cc", "comment": "Malware payload", "value": "50c063208801f6250ad0984212bbff667fa4b979b5443a639b24bc5bbdce0b5d", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798767, "uuid": "eb123b4d-3984-4293-b6fd-03cb5af25b39", "value": "T10592A50267DD472AF17743386DB307142676FE579EA283AE25D8121F6E22B100CA3F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798767, "uuid": "139f8693-5265-4b7a-a535-511b88f0fbf2", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798767, "uuid": "ba8d08f8-e7c2-4fa0-9193-6266954b800a", "value": "48:60bMG7ow3k5bkJV8bAPIk+DRiMOul5hSbqnvpfbNtm:7HoSKRRLbwCBzNt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772798767, "uuid": "4cfa5e81-2724-47ad-9f74-7a8ca7dc672c", "value": 20000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798767, "uuid": "88f981c7-ea49-4e33-a354-11ef646c0d9d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dd4ca94-1418-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1772798767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798767, "uuid": "37a7acb2-713d-48c0-b2bf-5e6d43c7f2e2", "comment": "Malware payload (Vidar)", "value": "d1e897e45e42f293036f8ca251dfbd6b", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798767, "uuid": "52878730-66f1-45e2-bd62-473f2a7072fd", "comment": "Malware payload (Vidar)", "value": "928b819cbc327ba9d52090b4961d6194e5d3683152ea9ce947d734c5497bec52", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798767, "uuid": "97702295-eddd-40d0-863c-57d894e7950d", "value": "T162242271BF0AA46DF5F0503905718282F617EC8F1FC0E61C2E552BB56B2E1950AE3A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798767, "uuid": "37f11d30-b4af-4c1b-a1b2-f9dd0478bbd4", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798767, "uuid": "ae1cf0ce-1194-4f89-b913-ca39fd22fe3e", "value": "3072:o48mCtjMdioR5v95lv3gsuu9i04n0PfrheKBrdMp7baIbkK0B+KPjL8gzQ1GPh:dCxEigPlY/nOthdMUIoK0Bk0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772798767, "uuid": "2245c812-3355-42a6-94b1-a42c24b7aad6", "value": 219648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798767, "uuid": "4acb44b4-ed98-4342-ae67-88787c9ec01f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c534e3c-144a-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1772798827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798827, "uuid": "4646b9d9-4e5e-4bd0-9429-1f863a6c533e", "comment": "Malware payload (Vidar)", "value": "6fdff05a839d16331d09803cf2bad974", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798827, "uuid": "699de032-bf73-4d5d-9189-41c10acac2b5", "comment": "Malware payload (Vidar)", "value": "5ac53e312732078514a827b41e1b2cbc6e7161970f9d9ad91f382eede969ac39", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798827, "uuid": "33ea8523-6be1-40b3-bede-144bef9e8f82", "value": "T161241237CB1C8765F49A6031D4B2028B5BADDC7385B56A48880EABD7A91C7E440B37", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798827, "uuid": "bd84653b-07e7-4f84-be82-1470f7f0f13a", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798827, "uuid": "60433f6d-4787-4ae5-9c55-c3d3e69cc614", "value": "3072:F/TtjgJ4dnyJIheU9acZI/WLhevbfm3vIRJbs13b4m3z+YF+I3h0CPsnEF0t2m:lTxg+5WcBb8bfm3MJbIkm3z+YMI6ClQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772798827, "uuid": "50cb4dd8-7321-4cbd-bc21-9c531c87f822", "value": 219648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798827, "uuid": "da509cbc-8452-491f-9963-104f5f130302", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f64c7f3f-18ab-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Fuery)", "timestamp": 1772798827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798827, "uuid": "8f0645e6-e8d1-4780-a3b8-e44577001581", "comment": "Malware payload (Fuery)", "value": "9ff305f437f337e6b56ce4269995e04c", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798827, "uuid": "26082855-7630-445f-83ae-7afa250e5644", "comment": "Malware payload (Fuery)", "value": "18e9a8bfad425d3ff9c0ab3d71e6890320166127b8bdf7460a7edd30f45be0ab", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798827, "uuid": "f27f8658-7aca-451c-8840-49b78d0a5e4b", "value": "T1A6757C41FDDB24B1EA02163248B762BF2734B9090B31AFC7D9446A7ABD736E40D327", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798827, "uuid": "47d41d6d-4d8c-4cda-a16d-67dbe4e69133", "value": "9cbefe68f395e67356e2a5d8d1b285c0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798827, "uuid": "35eac0b2-6a4a-4085-bad3-b0ba394e65c1", "value": "24576:TYXzsJChigMNRBCdXurmjSG4kl55aUpgRpZ+wMgee5SpeeZdY7tkHN3EAK1eQ2T1:TtCd+r3lRS7LQEtEAKF2TEGf9YK1t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772798827, "uuid": "11620d4d-9be4-4eaf-b175-ac6305ce1e97", "value": 1660928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798827, "uuid": "3cbc1e71-5cc4-4e97-afb6-115b46b59c8b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb5f4d00-1872-11f1-8e4c-82aee05be84a", "comment": "Malware payload (SalatStealer)", "timestamp": 1772798828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798828, "uuid": "5fc930d8-67e2-4484-a4d6-530781cca408", "comment": "Malware payload (SalatStealer)", "value": "14fa427264a590c1814babef08fcca5d", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798828, "uuid": "18671318-90c5-45ab-a199-3aa0ee2b27c5", "comment": "Malware payload (SalatStealer)", "value": "30a50cc0f7b317c9734e6792e7e4ec174035d92031bdcc87a80ad8826adc60b2", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798828, "uuid": "52e9295f-bd37-4215-add5-7963e2a55181", "value": "T1C5E53369BE16C6ABC6CB187B21E17FA6D63B00240DDFB35D885960E84F75DC292933", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798828, "uuid": "de382981-5d75-454c-894f-954385d2aac9", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798828, "uuid": "5ec39bc9-9eb8-427d-8f0b-0217ec6e1d39", "value": "98304:zj4uSUTxE/+s4ipMQc7YzoLZYX7hOIjKOm:zjdSME/+s4AMQA0oCwIjK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772798828, "uuid": "1c5afd51-c0da-4cf5-954e-295bd6a348c3", "value": 3296768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798828, "uuid": "6adaabc7-31ae-4bb0-b454-1a6cbe84e412", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31cdc053-13b2-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772798948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798948, "uuid": "3b6d6b28-3393-4662-84de-a4a71c3f11f6", "comment": "Malware payload", "value": "8839de129c0a227f080d57febf0e04d7", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798948, "uuid": "4840ec38-e157-4efd-abd3-60f9eb16d5a7", "comment": "Malware payload", "value": "b80ac13edccd2ca442221d7b22a6e8c7eb98688426582d38bf4ebbd5e0ab265b", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798948, "uuid": "990da320-485e-4574-a818-b24b9a38183b", "value": "T1AB269E07ECA108F9C0AEA37189B296567B75BC481B3263DB2E60B6782F737D05D793", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798948, "uuid": "3f788481-1b93-4290-b92e-4ad9e1a3b778", "value": "ed8b780a3ce7ca4aba78a21f6bc3d4e0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798948, "uuid": "44202e26-0f46-4de0-9b40-6649f264a5ed", "value": "49152:cUITOK5wYv9w+Vm508U5oTumujEVXWAf4mGJRvXS4w5yxkNtTPv+0srqTKKURIg0:cUQRq0/o0J1w5GkNtT/UD0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772798948, "uuid": "f186db7c-ed07-4732-8eee-ff8d71d068e3", "value": 4681216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798948, "uuid": "a0a39d3b-2394-494b-a6d5-e698ab8ab5e8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8bb927b-0bf7-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772798948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798948, "uuid": "8d6ceda1-dd93-4251-85b3-3d407f8c3ee5", "comment": "Malware payload", "value": "cbd5ecbc88acacb3b714629d0bc1535c", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798948, "uuid": "8dbeac3c-b69a-4868-bedf-1fb40f0b810f", "comment": "Malware payload", "value": "e06dbe87f6cdcfc942f274c4d7883a5ebadf48b7d5eab2a9ef0e900783a8e915", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798948, "uuid": "056c112b-dc92-43b5-b3e5-30617f37bb0a", "value": "T1640623137C85C139DC3218B1CC8F9EA51E386D707E524947B7A67E4ED9B1B809B273", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798948, "uuid": "708c53c2-7e56-4d40-91db-5ac8e8f005b2", "value": "49152:cZr3+qkejHzM+pq8kB3R4SKkyMZVJOdjLrx9gigzFUgudmWg7I0nS0azEHvD:i77o+pq88JXsL19gvGvk773FaIH7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772798948, "uuid": "38cbac76-0153-4153-a94a-bad3964bf7e7", "value": 3832320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798948, "uuid": "6aa42602-5244-4ccf-89f8-05c3f6c61bd4", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e4e4869-16fd-11f1-8e4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772798951, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798951, "uuid": "f002e462-28a3-4da2-8e44-560e4a7c7adf", "comment": "Malware payload", "value": "62f350c9bd4815695e5fe4099211a3bb", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798951, "uuid": "518b13f2-5898-482f-933a-244d890deb39", "comment": "Malware payload", "value": "7c519ab5b4da70d36c04ed39744f99ceb52d877c107c45cf7f731518fcb2c2d2", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798951, "uuid": "907a5eba-2fb9-4c0c-947d-f8c457f09b5a", "value": "T1DBE58D0BAD9118E9C06E97328DB7569A3B74BC0A0F3223D71E907A792E737D05E367", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798951, "uuid": "341f3f53-bb11-4ca5-9176-b8dd04f735d4", "value": "ebc247a77b4d4a804b261f97a1fd075c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798951, "uuid": "a4604cca-1991-435c-bd11-39f121504f07", "value": "49152:Bao7w5LONovfQqN0X/wZlJw0fw2DAqaDkeCvErOr:BaFaiM8SyADn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772798951, "uuid": "1ba7a82a-e940-4dbb-bfce-288587c253b5", "value": 3035136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798951, "uuid": "24160724-5164-4ebc-aaf5-4d3157b95bad", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea2a2ce7-1629-11f1-87c8-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1772798953, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798953, "uuid": "96dafd9c-c9ce-4e24-b6ee-d503f9a479b4", "comment": "Malware payload (RustyStealer)", "value": "a98c150c2f4a46f58503495b71137fb0", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798953, "uuid": "d3b60ce3-9382-490e-8f34-0bd1f4488dc6", "comment": "Malware payload (RustyStealer)", "value": "20dc254b66b8616088c5122b29211d7102306484b550f75caee7ec9b2a02e71f", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798953, "uuid": "d3c4a33f-8c31-4043-a1c1-c1c727f3b01f", "value": "T176B63319FD9359BAC593A97118AFB37AE7361A0E0607D9F7CF901DA0ED7B70209243", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798953, "uuid": "b426be32-4d15-4530-aad3-26c4faba7cd1", "value": "4794687cac0beee76bb775325b829d22", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798953, "uuid": "f02fae2c-3867-4045-a2a6-bb5a40c8ff5f", "value": "196608:k8AJgyeuPivvI4+7IDSJB9CL8PxLrIyrIuUVqmLqBILER1wpbmoP5:jzvvIpIDSJAg3IywtkA5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772798953, "uuid": "18b27d57-91c5-4cec-9685-b36cf93303de", "value": 11268608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798953, "uuid": "937bf558-75fe-41ff-89d1-02ca9266881a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb94a502-1416-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1772799008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772799008, "uuid": "2195367d-63da-4e76-9025-093e8127b896", "comment": "Malware payload (Vidar)", "value": "706caa75b592935c6a9daca877b7b1ee", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772799008, "uuid": "7c0fde41-1385-4c05-b054-8c217bf4c200", "comment": "Malware payload (Vidar)", "value": "0b672807d7526c571d3809112ca0d04e3df926b5414d00cb8a6d73f59a172e9b", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772799008, "uuid": "edd05486-47cc-4c85-b17f-e726d9a57c9d", "value": "T1DE2423F201455A5BE71288B01DA9D70C74A3EA3F92B12001C66777551E0F3E9FF7A1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772799008, "uuid": "e8f2b8a3-da26-49d0-aa42-b2ea93c732fc", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772799008, "uuid": "a9488e67-cde0-4daa-8d18-afc42294f630", "value": "6144:nMUNt7a3yqgdX/w7drhQZXveORMOqHa02FDz4+7cj:nMUNAgdPw7drSF3tq63G+g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772799008, "uuid": "d7a93c9b-f134-43e0-9733-f1c36431003f", "value": 219648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772799008, "uuid": "509b2d34-189d-460a-889a-7e4474f4efcc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c24903a9-1418-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1772799008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772799008, "uuid": "1aa2cb48-2104-4b3e-8b80-d7bb60f3821a", "comment": "Malware payload (Vidar)", "value": "f9131edf95a0ec263a8a4d7e6214240d", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772799008, "uuid": "18e0de6f-8c07-4d74-b3a5-91bcb25df074", "comment": "Malware payload (Vidar)", "value": "209b9780a3ee377f4c3b9174522a906f2e487d479041dddbec5eaed627c2e3d2", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772799008, "uuid": "ce1c57c5-966e-4063-b4b3-94b8ded3515f", "value": "T1462412B3F46412BBC249853298B6DF49BEB0042EBCD55C096FF7907A526B1B2C6512", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772799008, "uuid": "3bcff736-efd7-436b-8bce-ccd4569c9b92", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772799008, "uuid": "6cfb8daf-4807-4fe3-afca-33b24b63db28", "value": "6144:8QQYr9WkZ5Amo15L2mY4Y4Xd6gK+Zf2WIo:8QQPkZ5Ami5L2l4Y48L+Nc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772799008, "uuid": "47ddee5e-2399-4983-93c9-4f07c5c02fb3", "value": 219648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772799008, "uuid": "deec0c5e-dd83-4bd9-b0df-27b874f7b898", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11e7cfa1-1958-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772800147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772800147, "uuid": "481d67a4-bb03-4b87-a889-f8d0ed09bec2", "comment": "Malware payload", "value": "c0e4398459345ee5afa2ae477a733574", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772800147, "uuid": "efcc5a2c-2786-4e1b-b361-c20de54d95e3", "comment": "Malware payload", "value": "730e9e0bd0a41438d7d7af227f1441b4f9d8a54988e0add3a2e0fbd7312cc163", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772800147, "uuid": "6bc24a1e-cefa-42fb-93d3-a7ab4c75eda0", "value": "T12B642351EC9C307BD9234DF3AD1F99CF5E6D7AE52D68D85CC214EC0AE2B992ABC605", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772800147, "uuid": "0e0cff0c-d1eb-4b74-85a1-d90276b35138", "value": "c72d40c71bcbf3442320a9ed25ba079c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772800147, "uuid": "abb73f0b-15df-44cf-902c-775e3424adff", "value": "6144:G+R1G8O0NiIPoLt21g1Mauj/zlcQAcDLjoiOlDcXPcIQLwT:G+R1VOkRPgtb1yTzlcQfXjof5acNS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772800147, "uuid": "a5618745-ea1d-49af-9d8b-d76bcd8c9aa1", "value": 307712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772800147, "uuid": "1238e17a-9dc9-4ec7-bc31-bf801fdafc1c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f4d0332-195f-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772803176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772803176, "uuid": "8df74cd5-23ed-4a00-9191-174f1b6ff3c6", "comment": "Malware payload", "value": "1a3c1751280e8f154bf5e916b37ccacd", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772803176, "uuid": "c57d291d-74a3-43bf-b9e3-0e6ad7dc58a8", "comment": "Malware payload", "value": "1782f3db2231d7b7ab877c21fc550b44469e22126b17117e188d3317eed7d5ef", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772803176, "uuid": "9807855c-0cbf-4054-9030-3a939d943688", "value": "T1EE153AD176EAEFB9BA4B1F7BE627732F039546850B42C994D1623C43996364200FC8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772803176, "uuid": "5b6adad1-976c-40bc-9153-ce4f4ef7a14d", "value": "154514cb767b5afbf381ac853ede8b45", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772803176, "uuid": "2b562f3d-d754-406a-bcf1-7eef1ec74298", "value": "12288:Om8NSyLJO6JAO9r5oB+XenrvM5Ewo3Wd8VFoEL5XV:Om8wBO9riM4vwk9V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772803176, "uuid": "5ea9bec9-fbf2-408a-a75f-b4d545563497", "value": 928256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772803176, "uuid": "dc9698ef-10bf-4ada-a22c-e47f990f8aa9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6d95875-1960-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772803860, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772803860, "uuid": "7f6d0b4d-3463-4d4b-8038-e308d20d9134", "comment": "Malware payload", "value": "7d6c3a08a8b2fddad8561a9b112cf45f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772803860, "uuid": "a0e95470-f6d4-46c4-bc68-62f673fc61e1", "comment": "Malware payload", "value": "838bf411fbcb685ac17afd2e802c8144e9c04a8e04828d2c30e67fcbd0a5bc8f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772803860, "uuid": "6ae526c7-dcc0-4140-8cc4-c75c774b0d49", "value": "T14823F1C3617FDEE8CAF6593E1D2798C8B901C4157B0A0BDF45DB36E8ADB46C22E119", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772803860, "uuid": "af99da7b-2b34-4631-a688-49c4e49bcd08", "value": "768:BYlu1gzShvupCJk8hRIE3kpNwWa0xeKyxEy2e0bQ0EST5V4w:jSzSxupEl3kpNTxe32Thth", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772803860, "uuid": "3d0b9a66-06b8-48bf-b8db-5eb18936020a", "value": 47776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772803860, "uuid": "d864f440-d0fe-44f3-ac7b-869f569f0aef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e4545b7-04b4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772804656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772804656, "uuid": "bca87753-c117-4110-8366-9e3328ae2309", "comment": "Malware payload", "value": "85da9ac5bb94ca12d7e609e6d8eb3d9b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772804656, "uuid": "18c7f45a-2119-49f3-81db-785d8d4d369a", "comment": "Malware payload", "value": "8e61276d32ad1a040db17ae2e3b1565b29b63a2080d4b5c4a2aacb0f7847c28a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772804656, "uuid": "3c1fd00b-5867-4583-a13f-fb5702bbd2b7", "value": "T12A631B46A5D770BCC28BC070469BA971B9327CA111203EBF6BD4FE712E35E51236AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772804656, "uuid": "cee54425-879a-4cf1-894c-9f9e11d6faeb", "value": "1536:/sV7nxRw3Fm6ZlL29xpEF460o6Sc5R2fOdYn4nX7fsMAsRxMkwIbUr:/sV7nxl6mtrJsMA21I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772804656, "uuid": "b8f89b41-99fb-46ba-b5fb-2256cd9b7f90", "value": 67176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772804656, "uuid": "62771d48-b301-4dae-96c0-11d4089606e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73e94ea3-1963-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772805036, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772805036, "uuid": "20cbc7c1-818d-4c70-97e8-3fe6a9aef002", "comment": "Malware payload", "value": "0cf184d57ee9f0621320ed9ffa1369c0", "object_relation": "md5", "Tag": [ { "name": "pw-500600", "colour": "#18cc23", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772805036, "uuid": "fd7d3179-6fe2-4f1d-8981-ba586bafa492", "comment": "Malware payload", "value": "e96439664d44d80322864d5246ad5c1b54282f494e981717d63103e5c47001a9", "object_relation": "sha256", "Tag": [ { "name": "pw-500600", "colour": "#18cc23", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805036, "uuid": "0d3e7f34-da01-467b-bac8-3b9f224cba4a", "value": "T131C6339F6A74C09A7FE94E08D7B07E10A99ABAC393929416620B30255CF570D3F758", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805036, "uuid": "f686153b-04f9-4b01-ac9e-d0d84109aea9", "value": "196608:3AtifT2oAUV81ZZpz5GKAbWv7dx0H5a8vi0Am5mTOgq1oCwpuZaKK2YGzMH1s9VB:CaZAz7z5g6R07vzf5mK5oruZ3K2BzMHg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772805036, "uuid": "1809d7b7-9f70-40b1-81a4-5ef9117ae87c", "value": 12246599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805036, "uuid": "020b0c62-14b4-453b-bd2e-1bffeacdf342", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab3a2900-1963-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772805129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772805129, "uuid": "6c6a9f26-30b0-41f4-a4a6-3f8c8045e723", "comment": "Malware payload", "value": "f2d9727680b20d331144ecc8a8c5d634", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772805129, "uuid": "3a40fe8e-8af5-4fca-9fcb-a020d020e40c", "comment": "Malware payload", "value": "2882908c5aabac262ffebc419f6e3c1348db3a3e10b28118188ce2c7b476f936", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805129, "uuid": "775d1b6f-c6d2-4aed-ae13-a50ab1855e09", "value": "T15C8308327588582A210B428FD263336C70FFD8E2D611E5B6F6F922344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805129, "uuid": "4164ae49-aa38-4474-9136-0aedc98926c1", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnVWaeVN/:XEKltp9t2SX/yr2pbVWTVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772805129, "uuid": "2eb3c1b1-c694-4b7e-a897-438c1b7f317b", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805129, "uuid": "f65fd02f-bc6d-4828-b094-afbe3f97cbe6", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cf4a42b-1964-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772805346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772805346, "uuid": "0b9612e2-abf5-47c5-bf0b-cffd66e932d1", "comment": "Malware payload", "value": "7711c81c6d11f1416b61a03738795827", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772805346, "uuid": "f1b7859a-47a5-4768-ac17-98aec9d5e8fa", "comment": "Malware payload", "value": "33c19114562bec2cee74599723c483ca21085e686d79eeee399ba2e28bcac0b0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805346, "uuid": "a18432f6-b159-42df-940c-e8d5ebb20ad3", "value": "T17C32C517A7BBAE1BC4D037770193072162E95F916024472FBD0D1C8E6E9B3412E3EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805346, "uuid": "d71ee08d-3e14-4984-b6b2-37c9965358ec", "value": "192:xvrOR1CQOsz1NxfAzMH9iG0GhWaDpU/O7Q89AGSybcqeif:xvrbCzfaM2GwIU/kwGSbUf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772805346, "uuid": "703fb3ad-abab-4797-a60d-874ca28f08ee", "value": 11024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805346, "uuid": "7ec0023a-520d-452f-a3e7-6c70021afec8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47ddd476-1964-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772805391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772805391, "uuid": "4d5ddf14-de55-4d91-b250-f8bda9959c28", "comment": "Malware payload", "value": "7de8bbc312a17801ea1a41bae93fd972", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772805391, "uuid": "733bdb8e-004e-4a71-bfa3-19c25b0253dc", "comment": "Malware payload", "value": "97fc80d843f7a08604aceb9573bf6b608733c676cf672fe4036b397045d33350", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#aa8ece", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805391, "uuid": "1b911192-5141-45ef-9e07-3b5e5c3c3e24", "value": "T142B633202BB40C37EDFE0A3B98E15196D5F9DEAD654BE38910113AAD0F7B280D7531", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805391, "uuid": "e25ece8e-218b-4933-9e38-17f361b234f6", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805391, "uuid": "621c7935-cdbd-4dae-b717-109e506ab2f6", "value": "196608:NTxmVDmAGRt9IwopBDSyV9gCpS+zTXzwxjYDv+cuZ6xwe0qBw2vYYMfsPNy5tv24:qVDmAct9QpBeg9gC3nXzwx8T+cYpumme", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772805391, "uuid": "f0aae599-adb9-4c18-912e-9e951e6f67e6", "value": 11104536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805391, "uuid": "e417b740-ea86-416b-aefa-280b5f15461a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3305e352-1965-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772805786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772805786, "uuid": "c1a61c88-216d-4ae0-8f3c-88891cab08d3", "comment": "Malware payload", "value": "799db6d0cc2d10f22842d9d5b7b73d97", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772805786, "uuid": "d88b280c-90aa-4b89-bee9-37d69a200618", "comment": "Malware payload", "value": "52984ca49620519ec8c3210dc15c56328e74d9a3621edbacccadfad3fcda2af8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805786, "uuid": "91fefa52-de6e-417c-b87d-0ddb367eac97", "value": "T1C8E3885A6E228FAEF67C873147F74A20976D23D623E1D684D2ACC1141F6038E545FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805786, "uuid": "1c980e25-71f4-4bc2-ac59-8fa6068319a0", "value": "1536:p+vTcKot8sp2MKypYz8ZOfGQ+v3eB/hub8mXRCTUGk4onuftL4VxydbK:p4lybKpzEOfGQ+vEubTt4ouftL4+dO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772805786, "uuid": "45a99b6e-34b4-45f1-ba83-f2a3d9e709d2", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805786, "uuid": "ab2d3306-763d-40cc-aa32-65d739a9d8a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94d9b81a-1965-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772805950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772805950, "uuid": "9e720d17-4390-484a-aa37-db2233fdb4a0", "comment": "Malware payload", "value": "d9d5af3173db4506ea8b69bab1e6f5f8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772805950, "uuid": "e3134a77-3933-4d0e-be07-42b9394e820a", "comment": "Malware payload", "value": "46aa73352ca0708dc0b9b49c76302fb9c1144af8eec1cb78929246290acce266", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805950, "uuid": "518a252a-a175-443a-850f-10347e4215ac", "value": "T116E2B931A2E9183BE11386D5A728372D359AA147D70E0521F9AC33B1DBC6E47EC3B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805950, "uuid": "82cb8568-db67-49fa-a36a-c6252db9d746", "value": "768:5+pyPblkQdXO5kQdXO5ZQAPfi1QAPf+dsQdXO4KQdXO4bQAP1QAPf7bmi2zT/f34:5GWblUUddlToLzrALOSkMj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772805950, "uuid": "b08db5ee-3b6e-4f9c-ab11-8fbb085fd29e", "value": 33964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805950, "uuid": "ec4fed81-df3f-4ad3-a273-ace6ed26b796", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0c8c231-1965-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772806077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806077, "uuid": "281c979e-9299-429f-ac91-38e72b2e8f67", "comment": "Malware payload", "value": "b5d276c14f44256b6923845d0e075b37", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806077, "uuid": "d0c9f5d6-5815-4dc1-ae53-a2cf773013b0", "comment": "Malware payload", "value": "a77caffaab85e0369ad5b26e348ef2dc981f381d692b891e767e6bf717b38ceb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806077, "uuid": "09be6aa6-84dd-4cf2-b328-5b563dcb94ef", "value": "T199040B82A9117F73C1C3ABB6F7DFC2553B736A1497D73301A959AEB02F4A68D0E291", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806077, "uuid": "a8586835-a33e-4a91-aec0-15fb88d74339", "value": "3072:2zomh356LKH4y8/LTAXtbx7XrqZVM7ZlDvq0Gk+PZdJ7VHOPJLD+:2dhpsw4//LcXtl7XrGmzvq0Gk+PZdJ77", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772806077, "uuid": "250a160d-720d-41ef-86ce-5d60cfb8bb4a", "value": 182404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806077, "uuid": "0ad9ccd0-02d4-4f59-824b-bd120146747b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f664e4b9-1965-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772806114, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806114, "uuid": "ef57fd93-2b07-40a9-82ea-33885751c3ac", "comment": "Malware payload", "value": "f232e61333d0748741e35a6cbdc26eb5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806114, "uuid": "732521c8-4226-44eb-a1da-d2d8188e661b", "comment": "Malware payload", "value": "08102da9b2ec1e82d50cccfc875640dc32a15e5542fca7772113dc2b5ba21800", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806114, "uuid": "78f33600-c1d5-4172-b116-2064d6118b54", "value": "T11934F1B67ABF01F381385E5D93AFF931E86BA92BA84104F4DA542C0D771EC39D46E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806114, "uuid": "00859d90-80a2-459f-bba0-9711d59db245", "value": "6144:I9NgKAj+boEyhD5Y5jIBtZG+HlyuA/ybtluTMS9:IK+borQ+BtIirAtD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772806114, "uuid": "f248ef58-5ce2-4cb0-9d01-dfeb41c424b9", "value": 247902, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806114, "uuid": "8772a2ea-a745-4212-ac17-22f26a373ad2", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f17449d-1966-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772806289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806289, "uuid": "2e93e7ed-861b-4b9c-ac35-5c3d227150b8", "comment": "Malware payload (Mirai)", "value": "bee43e7ecd9b50619e66ddd6e6eb9679", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806289, "uuid": "a5dbb762-e277-4f88-81df-a2efa1444544", "comment": "Malware payload (Mirai)", "value": "75093b62b12a21069b8276a6ffee3e5b21da5335d56133f0a32177f48f4bbbf5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806289, "uuid": "fe502442-d26b-4f6a-8aa7-758e8021458c", "value": "T1D0E3F7C399267EB7C2C6EBB566E7DA7007D3EC151B430A49B1AAD9F40507DCCB8093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806289, "uuid": "1a252270-c977-4efc-b978-226a43ff7bd2", "value": "3072:4Jpg4+qQgbxVjFFWytTffwqvhGvaCvLTi4eVlOmn3IkK:4Y4+qRlwyhfwmovaCvLTi4eVlOmn3IkK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772806289, "uuid": "8bd14cda-2dae-4dff-ace1-dd12a5f10fb4", "value": 156503, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806289, "uuid": "d243a910-e84e-47fd-b529-b75aad192580", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f7290af-1966-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772806317, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806317, "uuid": "ed331a0f-fb3f-4158-826e-fe9a4dacf3a8", "comment": "Malware payload", "value": "e01eb452a58959d6739f08ca82d6e994", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806317, "uuid": "76639abc-a71a-43f4-9a85-7031d601c119", "comment": "Malware payload", "value": "bdec218e90eba0b0963dcc8bc7886536c269f443c7b5cf4c75a94ba68ab620d9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806317, "uuid": "dac4b1cd-442c-42fa-9113-5ba13d7a3f36", "value": "T13EC39DABB24F1051C82647F41BCB579C2E3325019E2B9AE77C6E373E1A369DE58063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806317, "uuid": "8939113f-6d1a-43df-b46a-cd55315dd0fa", "value": "3072:wf0GQgHfg5nBR4YYSOxTKB6Aq7mgbgiCrheiiU4bqe:wf0tJBR4NSALD7rnCrheioqe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772806317, "uuid": "ae555b27-14cd-4156-afb5-d11312ac930a", "value": 124344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806317, "uuid": "d8aa15f7-c2c5-43e7-afbe-0ea9ffd4fc53", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0858a21a-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772806573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806573, "uuid": "9b938753-2e67-49a9-918b-3c933c19ab54", "comment": "Malware payload (Mirai)", "value": "9725a8511566e88d84d4a799f85993a9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806573, "uuid": "75075c4a-f9bf-4c8f-96d3-74216cbf1afb", "comment": "Malware payload (Mirai)", "value": "a869eabcde6768eb40b9c0a68eb665d0d825328f7ef49ddebf78efb5bfdffe2c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806573, "uuid": "697d2abb-11e5-4535-ae9e-e31f1ec91708", "value": "T11934E7036B517EF7C8DBDE3306F6C20124CEF4132765672672B4DA6CB91A94F49938", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806573, "uuid": "aabd77e8-fd4c-4d44-9c8e-50c160532b50", "value": "6144:3Hv4807GssPTuVnEXsQdnWczvW5XZGUR1dQhp+1J71:Xw809dE8wzvW5XZGUR1dQhp+1J71", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772806573, "uuid": "b027c1cb-c2f7-473e-befb-9f6e63bd9f96", "value": 231379, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806573, "uuid": "c0e4ea4b-7526-4db7-bc71-99f4787371e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0e444d4-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772806883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806883, "uuid": "69410768-3a47-4788-838b-8a0222d997a3", "comment": "Malware payload (Mirai)", "value": "827a8e3b83d144032c770ff5e761aa31", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806883, "uuid": "30fe03db-6361-4796-8df5-7987f4960131", "comment": "Malware payload (Mirai)", "value": "aacf774455b1b371747775e6bb083f748c006d7939f786b31ddb5e8bfc16106c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806883, "uuid": "32bdb654-9efa-4d64-91a9-a7b8e313cdd6", "value": "T1DF160295F3830D4BD9C5817F758209884900EC2EB6E5C27B7753B5BF78BDA309B66A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806883, "uuid": "039ef0c8-b045-473e-aed4-e13952ab7d15", "value": "98304:ocrlUgk4LlOi0ywSkyv0vY7Z6w4AHzXkVwYQb:fk4x30/Sn/BHzUB6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772806883, "uuid": "7dfc96bf-cd05-409f-8f1f-f97259e69681", "value": 4291176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806883, "uuid": "521ea195-01d4-4f3c-be8c-6e98e217af6f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efc36382-0334-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1772806883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806883, "uuid": "c46d195b-1a6a-43a5-a347-22bc5b4adb65", "comment": "Malware payload", "value": "a873a9e36eb67dc394595fc34db9e30e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806883, "uuid": "44876dc0-9401-4c65-978d-8cf9590a616e", "comment": "Malware payload", "value": "ad9abbacc85360db2fce1f25a6978e02848a9b6588e30438a089ad8620a3e118", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806883, "uuid": "c804e68b-30e6-4f42-86fd-4a5176d8716e", "value": "T169765AC7FCA404A9C0AEE33589629163BA717C485F2123D72B50FF682F36BD06A757", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806883, "uuid": "865f5648-d475-4c0f-8418-71dffe503660", "value": "49152:+gZDlTVfPP05lX3X9RQWCCRxvWH3amzYmL3wWIo3baPAHlUoxwZPPZRitGi+fGDt:+wzHbAR6YmjRiPAFyF1VcBqEf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772806883, "uuid": "a655fe52-ec78-44cb-b3ea-25c807dd71a6", "value": 7164052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806883, "uuid": "18118163-9568-4cca-be12-e9a255a132d8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c109f7de-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1772806883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806883, "uuid": "63a0a028-51bb-48e2-a137-1eb85c42adaa", "comment": "Malware payload (Kaiji)", "value": "7dc6a0892cd5887cc00ed7ac3bfa9996", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806883, "uuid": "524d8c54-5ca1-45ff-ba7a-5a9927a0b632", "comment": "Malware payload (Kaiji)", "value": "875d10dc7f2e41023cbf1e34a7877722d739cf239f475c53d389b3c69d126206", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806883, "uuid": "7aeffe07-570a-4490-b456-b1fb1afd5983", "value": "T1A0A5337F5DFA6EDBFE3B251969D9A484E0E704B20FA528466EC05608737C2E0CF312", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806883, "uuid": "c514976e-0a9c-4321-b035-bb4f7f28db1e", "value": "49152:ZjNz0wE6WAsByYLmnNXfOssMRq3hk+8mDyH:1N1l6aNXfOKwx/8V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772806883, "uuid": "3785876d-8556-4602-afad-733a27b1af1c", "value": 2083124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806883, "uuid": "577db0a2-6887-4458-be49-895a2f2e05bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f40efb0-100d-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772806883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806883, "uuid": "f751f752-c17b-40b7-907b-a3be11a80d7f", "comment": "Malware payload (Gafgyt)", "value": "3414f8a7f3468845241bce5250883b16", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806883, "uuid": "4f968fba-a9bf-4ea1-9231-ed6cfbb11dea", "comment": "Malware payload (Gafgyt)", "value": "42c305a25b61d95365a8e28f42aff6512fb12158d46310a92d8c846df164dacb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806883, "uuid": "5b92f1f6-2bf1-42a5-b29a-490035bc507f", "value": "T105666BC9BC1D6462D5CAB7752F2312D93639BC088F42C7232614BF7DAAB23598F136", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806883, "uuid": "2741b71c-e93a-42ed-96ed-6fa761676be1", "value": "98304:JiXm443RvrhmHtGpZpPf+DH66S3TUUSrpBztEV:Jkm443RvrhwK1QBrpZ+V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772806883, "uuid": "22ef9d81-0bd5-442a-8b26-40fe08dc476d", "value": 6815892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806883, "uuid": "c5de64d3-3f90-4efe-984a-0b9c1a174021", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c11a5b20-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1772806883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806883, "uuid": "67ce8241-3571-4e64-894d-ddaa881fa180", "comment": "Malware payload (Kaiji)", "value": "60a264328556eaccf625dac0692bd29d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806883, "uuid": "1a569bc9-65d7-4442-923a-2f797eee4da0", "comment": "Malware payload (Kaiji)", "value": "ab802880692ce7b1d574eb00e9bc69849cf4cd9524b203ddf5adb4d0eceb4f5d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806883, "uuid": "f0a2d2c2-d51d-483e-88e5-1b5c31ab3b5a", "value": "T12FA533954274B409A9289326FDF27D73F683E429F024BC663E96DFA904370F94EF09", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806883, "uuid": "6776420b-f273-4350-ab71-afb2c694c8e2", "value": "49152:lQbWX58knyV2k7Gi9L4ZlTle7F79Lz2fpLxA:KbGvyV2NeLeT2FpLeI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772806883, "uuid": "133276dd-fa60-48ae-87d0-6c74a1dddf55", "value": 2262176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806883, "uuid": "2b915dad-a438-46eb-a997-a48f5ca37cd1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f03375d3-0334-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772806890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806890, "uuid": "c75b4ccb-0a26-4606-995e-2404197862d6", "comment": "Malware payload (Gafgyt)", "value": "5e1f1bb71c779e1b74649666de4d414c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806890, "uuid": "8c5d36f2-2237-43fe-aad7-d0be6023dc86", "comment": "Malware payload (Gafgyt)", "value": "0f070694f5431d94b73d3b31e7738f198c43bc01ec62404f2b22134dd28aa34e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806890, "uuid": "8ab990a1-7df7-443d-a29a-6f97a117aec3", "value": "T1786629D7B9924942C4E43B77A8BE81C432621EBA9F8612176D05FE3C3EBE1D90E357", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806890, "uuid": "8390ca7e-eea2-4717-9ee8-02cf68cf49d9", "value": "49152:X8aNzsObKFB5N/TvNRLSX0PNW5mwXnR13E5/ii5ohpoH7o5Z5EW:X8FF5N/pReXZi5rH7wEW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772806890, "uuid": "8cb13e58-8a20-4c29-8e7a-e244e93e523b", "value": 7078036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806890, "uuid": "32a24efc-bff0-4865-a7f6-95f808e4efb4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6401c24-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1772806892, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806892, "uuid": "3de5479d-bb6c-48a7-8a30-5584d63fad93", "comment": "Malware payload (Kaiji)", "value": "fe4617f616fc3aa1ad7222f9ef434046", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806892, "uuid": "17323fdd-7ab2-4109-b2cd-7cd95ed8c80a", "comment": "Malware payload (Kaiji)", "value": "697e5f7231245db67804794309ecbc55d403c20f9efdda785eaef08ebe02dd63", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806892, "uuid": "c2296154-e6da-419c-b35b-e266a37f182c", "value": "T196A5330C7059913814D49B99EBCBB4E805023A28BEAE2E0F47176BD6305F9FD49617", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806892, "uuid": "8104d3a3-fce9-4e79-8a0b-717858a6073c", "value": "49152:zVU8xqZzWitdN7MIqZxl4CNrRVuSt48wwnSwKp:zVq5WiT4xHlfBnw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772806892, "uuid": "7d32b3d4-3f0a-4749-b109-0138fb399ba7", "value": 2067688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806892, "uuid": "71c0c68e-1c96-470d-b2eb-9071995fa290", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01d37a8e-1968-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772806992, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806992, "uuid": "9e87d13d-8477-4de3-afe5-494acd94262a", "comment": "Malware payload (Mirai)", "value": "02bf2ec7042c098a5a586b75e2a7363a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806992, "uuid": "89c8033e-2adf-476b-9350-a0c84d0319dd", "comment": "Malware payload (Mirai)", "value": "59769d49d37eabb1773f6bb1e98f870d821a27f1abe1fdcbb263cbc68e6ab435", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806992, "uuid": "592b183f-7192-4771-b97a-1e349edb6b79", "value": "T1FAF3F742771D3E67D1D7EEF026F7E3F043EBA8011B936540F19EAE845276AB12409B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806992, "uuid": "61a33029-7d3c-49da-9f2c-fe0a1849eaa0", "value": "3072:+Z8xRSE/rVnKK4f1qw86uSxty6vd0vL+i41pl2mn3F8+:W8xRX/xKK21b86uSxty6vd0vL+i41pl7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772806992, "uuid": "d276a727-20ae-424f-9be2-ac3381cb4c18", "value": 172646, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806992, "uuid": "892650bf-0b44-40b3-aed2-100fe6a17b92", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3520bb75-1968-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772807078, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772807078, "uuid": "5990d1c5-305c-4855-a5cc-c2daa73afbf9", "comment": "Malware payload (Mirai)", "value": "129ed011cfa9904fa52ad150b6950824", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772807078, "uuid": "90ff2eef-ec8d-4a82-98d2-b219da79b788", "comment": "Malware payload (Mirai)", "value": "2dcd703a5aae615d2311be8729842009e2bc09fc514373ad9eea879b28983bdb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807078, "uuid": "2dbe1572-2bf1-4166-8344-9be11c0ff7c0", "value": "T193141B85DA417F63C0C66BB9F6DFC24133B39B14E7A723059528AFB03B867994F261", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807078, "uuid": "575896b0-5d54-4de6-ab3c-26c0419e1fd6", "value": "6144:frMHGxaaVAlBXXGq/Noj1dbBciM/RFqfaXxmk2WdZyJl:fIHGxaaGlBX/FopPcr/rqsxmkDdZyJl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772807078, "uuid": "b87eadb7-c3f0-4f67-911c-2c9b5823af30", "value": 197198, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807078, "uuid": "f1bed9ef-f1d2-4eed-ba27-d72c1a746d82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6251a8c3-1968-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772807154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772807154, "uuid": "bd618dfb-3def-4efd-870a-45866bbb5118", "comment": "Malware payload (Mirai)", "value": "f94b718f6aaf8434f8128fc9b1911b87", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772807154, "uuid": "6a5ad39e-50c7-4165-a9b9-df433d249882", "comment": "Malware payload (Mirai)", "value": "54fb30d02e4910a880020c20ce6ac8e940c1ab31ffdbeaddb88e5ff822d8d9f9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807154, "uuid": "50eebc66-d809-449f-974e-0fc14b08e3c4", "value": "T18D3495563A22BFBBF1D9C67047B3CA2046D565912BE19346F29CD71C1E2028E681F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807154, "uuid": "14024ab0-168a-4f50-b73a-6c9c3f537ce7", "value": "6144:ALcnnOd8F1A8qhzjvzvP5XZGUR1dQhp+1J71:8dz/zvP5XZGUR1dQhp+1J71", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772807154, "uuid": "02648131-17d1-4cde-b637-9891b2089330", "value": 231318, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807154, "uuid": "edbdd49b-115b-4bc0-8784-dbad4e7aee4b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcfae515-3837-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1772807155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772807155, "uuid": "931b7de3-1335-4a44-8a24-5666c467edab", "comment": "Malware payload", "value": "c3c561c20e48169f4906c6b0b135984b", "object_relation": "md5", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772807155, "uuid": "284d1327-907c-49af-93bc-d1c1b00654c0", "comment": "Malware payload", "value": "b914abc696286a639a847d2e3a4a36ff682f30a87b08c4ffc61f2e0cf5e7ec5f", "object_relation": "sha256", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807155, "uuid": "144711ec-e092-447d-858c-0f187a422d67", "value": "T1ABF53329C35BA51C444DD111B88E299A937D8D177E1E17314E43336CFE378AE3E8E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807155, "uuid": "ab6d947e-51ec-46b6-b723-12923453969a", "value": "98304:SyrPvG3UNpYqQLpXhHHeanDebmPL+okjWa1luc:SyrPO3UDsdXp+z8+FWy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772807155, "uuid": "ed298737-f9b4-48bd-a617-f0a1e791a5c7", "value": 3526945, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807155, "uuid": "783cb01e-3e1d-485e-a79d-569dacb197d4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b48c4d3f-1968-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772807292, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772807292, "uuid": "f0366eb6-ef08-4823-b1f3-0551f9647151", "comment": "Malware payload (Mirai)", "value": "f823d435762735379a17b06ab68ea0d7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772807292, "uuid": "b9ed5de0-d7ff-4909-bbba-89fa71a44a31", "comment": "Malware payload (Mirai)", "value": "84dc78acf07c09ff8547999bce9a5da80cb330a2d1d227908c4421182550f461", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807292, "uuid": "5a285034-ac78-481c-ad56-857371c19426", "value": "T10AE31AC1AA56FEF3D5C39FB502A3D61006F3DC155B2B8E45F3ADADF04A1A5C8B10A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807292, "uuid": "fe5107a5-45db-4905-b37f-d076db69c671", "value": "3072:csv81eNAImYKr8ooRuRszav5KGZbiobf03mc3BkU:Fq/8ooRu6zav5KGZbiobf03mc3BkU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772807292, "uuid": "a3d78f3d-e44f-432c-a956-2baa3118ec2f", "value": 153840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807292, "uuid": "a6d6d383-dfdd-439a-a556-7b32609cf222", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db3d9f2d-1968-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772807357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772807357, "uuid": "1f79947d-719f-4283-9673-f97899a9df95", "comment": "Malware payload", "value": "cca3f083dba3cfae9b45f243c10adad0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772807357, "uuid": "a58072f6-e2fa-4a53-8731-a6148cdc4b19", "comment": "Malware payload", "value": "7a6e204bd9e3f075c2a12d1803a0422c62183d981e8dd70028b9fb4fbd5cc0a9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807357, "uuid": "16264665-217c-40bb-8f06-13fc730f2fb6", "value": "T1E4A328A3CC762F58C628D5B4B0B18F796B93AA6081475FBE1567C27480C3D8DF6063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807357, "uuid": "8c315e4f-968a-408f-b336-8fe738b313fc", "value": "1536:7NufPeqU2CVKCsNV7lsLPC9z+NzWuBx/3RhyXAQ:YbU2RC4kPCtSzWu3/3L1Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772807357, "uuid": "330daafe-4d0d-4be6-baac-532293e67980", "value": 105056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807357, "uuid": "ccbdd0a2-3666-4997-a635-1802671ed81a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3831c59d-1969-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772807513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772807513, "uuid": "2d2abd71-b5b2-4935-9771-42c5f477ba1b", "comment": "Malware payload", "value": "6e149f4fd5dfe9a843fe101ae93fc170", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772807513, "uuid": "f839e0ac-ccaa-4858-9257-b351de23b78b", "comment": "Malware payload", "value": "7fee635fdba1b376944aa5096888578773c21061f62c9c8478e5e9316ef3557e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807513, "uuid": "cb6d5ef0-2cca-42a2-806a-42903aba9340", "value": "T1A7D3F8C7F900D9FAFC0AE7374853080AB230BBA545925A372257357FED7A1990477E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807513, "uuid": "6028a45f-0d55-403e-950e-3ae0341c6da2", "value": "3072:qNbul4MGHJLqHy5Fut5K/cwpifdDounVoQV1jbiGLD3rQtJ:HHy5ct8/cyiWuVosLD4J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772807513, "uuid": "4d2266b9-4a62-49f5-a8d9-83959c76b920", "value": 140064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807513, "uuid": "1458219f-2224-42c4-a104-30aa9aaf02ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f735038-196a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772808035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808035, "uuid": "a2a78dd5-d1d2-40ce-9681-6c1a4eada8b2", "comment": "Malware payload (Mirai)", "value": "e5ccefa3f98b5e67a713a05e259dc22c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808035, "uuid": "53fd97a3-ea80-4cb5-837e-2c0c2ed8a079", "comment": "Malware payload (Mirai)", "value": "e65da5b3bb6cef03a0f0a7abf43544de41a95dffb36bd04482aa2397358ab553", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808035, "uuid": "18154f77-7723-497f-bcd7-0c04c29e0780", "value": "T13E04188369927DFBC4C2DFB45BE7E11145F3F8351B622209B3E8AD951A4DEC82E0D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808035, "uuid": "8e64e72f-a7dc-4ebd-bf5d-23564f09e761", "value": "3072:aXjla3S+zUXPjP8IU/z6D2F2XUJ1opGnj3EvbKGiELoeB0IC430k+:sQhAPCGyo4bEvbKGiELoeB0IC430k+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772808035, "uuid": "1f070dc9-bb02-4495-9b6f-a8acc6dc1cc6", "value": 188739, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808035, "uuid": "7d499792-6b49-48b2-bdaf-ed764d6a1de1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc8afa76-196a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (AteraAgent)", "timestamp": 1772808164, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808164, "uuid": "e05304bb-fe90-4219-8ea5-0de797e11ce2", "comment": "Malware payload (AteraAgent)", "value": "241918f70447c5870d3ac2fc8593c615", "object_relation": "md5", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808164, "uuid": "0fbb582e-93dc-47dc-896c-a6a463555b74", "comment": "Malware payload (AteraAgent)", "value": "42b9d965bbcdbcd98dd4104379e46b23c5238fe4dc23b3ee5cf8689435ddfd55", "object_relation": "sha256", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808164, "uuid": "46edb56a-c2b0-4722-8e42-a6df28c678e7", "value": "T1AF862318FBE009AEE5778276C56A8520EA327C8D3720C54F47A4B6295F3B7A075BF7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808164, "uuid": "8e3f4ae0-5439-4bc3-93ac-69488247f2f6", "value": "196608:WW/FAmnGYLnWgziirlb4/ieF3GrAfedpvCs3md8r:RAqGYLpZreF3G82yc6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772808164, "uuid": "ef6b6a5e-e1be-4f00-8230-06a393bff3ce", "value": 8601600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808164, "uuid": "4d0d45cb-ae9d-4f3b-a53e-4f1948ea5d06", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d85e703-196b-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772808354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808354, "uuid": "bea18a9e-3426-4db2-b36e-73920d95bf33", "comment": "Malware payload", "value": "e7c1f41e6214fd47cff351329d65bec6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808354, "uuid": "c4ee615e-dddb-405e-9be3-ddfdcac737ee", "comment": "Malware payload", "value": "25c83c2808f1b19bee06ed3e25cbc65a054b9916b647d5360c1a969467e4a291", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808354, "uuid": "e2584237-5f66-426b-87bb-51459c9832aa", "value": "T1D8930749FD406B10D8D635FAFF4F024973934B6CE3FA7201AA245B2523CAA6B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808354, "uuid": "28df9314-f951-4bc5-b2eb-553bad2eacc1", "value": "1536:wqnZy8D4zgUdtS0tFbvacgzafVAweBuqKlUI9HiWNRIbT2gZ1Ykn:68NUv5nTacgzafVAwe4BNRIbT2gXb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772808354, "uuid": "3a73cbdf-8d9b-4738-a60a-8fa1e019e8b9", "value": 93252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808354, "uuid": "83550e84-5d49-4329-b75c-3c48c4d3f652", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68d39182-196b-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772808453, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808453, "uuid": "6493a15a-0d60-43f3-9502-bf1631c41ac9", "comment": "Malware payload", "value": "06c5bfcda406eb507afb74351c8105f2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808453, "uuid": "d3c15be9-c2bc-446f-b318-b0cee83a3631", "comment": "Malware payload", "value": "f2317508e45edccc7a7fc41be9a88f4dfaafa9b4f45dd0cb627a538586a0941c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808453, "uuid": "db5244c2-f656-4286-9ca6-1bfdccc67f79", "value": "T12D14E882A9017E73C1C3ABB6F79FC2553B736A1497DB3301AA59BEB02F4678D1D291", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808453, "uuid": "35a3ced9-6713-4219-9150-5e93ec6dcbe2", "value": "3072:pTtLjFZ69GF4UtfQPGEicr28krXIp1La69BzRyc9FvV0G6ZgZNK6Tav2Kmq+:JZTvF4EfQOEL28krs1LavcXvV0G6ZgZV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772808453, "uuid": "1595fb73-3933-4ec6-8e11-c7ac8b8c0dad", "value": 190403, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808453, "uuid": "68ac10a8-70df-4288-88f5-cc404e989a2b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8efbcdeb-196b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772808517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808517, "uuid": "cdaaf4f8-b79c-43c8-8ca7-21939c2461b6", "comment": "Malware payload (Mirai)", "value": "54f6c3db6ec16331638038f918755b80", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808517, "uuid": "4ba42bd0-74e4-4185-8748-4d204379dbc3", "comment": "Malware payload (Mirai)", "value": "dc971a180d1fdb297a7221e2f451bcdca9f0e1c7e12ccc579dead2d8b1d5c703", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808517, "uuid": "46bfc64a-1baf-4cff-a284-1f8f10d9061f", "value": "T12B1408C3B915FEB3F48AEB7204D3C72061F1BB614B531622B297B9759A3A2C43426F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808517, "uuid": "834d9bd4-fa8e-4aa7-b909-4468b23a2628", "value": "3072:+TXosRXPb8RyelempUYCDPAPA/IWIVQjbilLBIh5gafo5/cvw0GL+i41+l24n3z5:qR4RyeYmpUYv4/IW0LmOVcvw0GL+i41M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772808517, "uuid": "faca38c4-9cd0-4aee-ac6d-baadb38ea25e", "value": 195461, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808517, "uuid": "9c9ac5e6-f55a-44b9-9568-e52fae1c07a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c591c21c-196b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1772808609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808609, "uuid": "19fb6a96-b76a-464f-8a7b-0011a37bce5f", "comment": "Malware payload (njrat)", "value": "abf825efebac862d0769034458fb7d40", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808609, "uuid": "8372453f-893d-4317-94be-05adaa8720cd", "comment": "Malware payload (njrat)", "value": "e7daec1081d809764746f443d06535bd12b49061460f4a10690a16c6c504b274", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808609, "uuid": "d9d5eae9-33d8-4d78-87bf-ab59b755b0b6", "value": "T1BA032B4D7FE18168C5FE067B06B2D41207BAE04B6D23D90E8EF564AA37636C18F54A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808609, "uuid": "4380b08f-589f-4067-915c-32a749627143", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808609, "uuid": "208f9ce8-7df5-4132-8c29-cc50f57e6026", "value": "768:pCENj8nAwJvtPrbAEgC4arM+rMRa8NucZct:plNwAwJ1DUEmF+gRJNN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772808609, "uuid": "b6adc314-5436-4b36-ad71-bee006af1c5c", "value": 38400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808609, "uuid": "90ea0733-6a36-4392-83be-27e1fa81b9ad", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c605222f-196b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1772808609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808609, "uuid": "79386d41-e77c-49d5-9de2-a2350fb2e6b3", "comment": "Malware payload (njrat)", "value": "b8f2a8d425532cd7a0f03cd9a2d10048", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808609, "uuid": "5c3729e4-6ecc-47f7-af7b-d711f474f723", "comment": "Malware payload (njrat)", "value": "897e0839745ab5cc66fab498c6c7c0b88887d6804db9e24b268bf480bcbc3f4f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808609, "uuid": "8e1b516f-5194-4fa8-b0f0-096c285400e5", "value": "T1CE032A4D7FE18168D5FD067B05B2D412077AE04B6E23D90E8EE264AA37636C58F50E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808609, "uuid": "1d9c5ae5-d230-4d76-bdb5-b646d8534b02", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808609, "uuid": "7599f3c8-4599-475e-98c7-934ecad64351", "value": "384:Va2jKicgGjn5xL5oyUi8i1BUjHfVSYMbOhwrAF+rMRTyN/0L+EcoinblneHQM3eU:g2Qf5DUi8uUjHglOyrM+rMRa8NulOt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772808609, "uuid": "dfa9b91e-bdf5-47cf-b82f-9e886abbc6a3", "value": 37888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808609, "uuid": "a5d12551-af25-48cc-898d-5d42232f35a0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c61cc54f-196b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1772808610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808610, "uuid": "2bc875ec-6881-482f-9d38-cb298331098f", "comment": "Malware payload (njrat)", "value": "4068c344ce37a94652cba176e2b4d690", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808610, "uuid": "775a1bb5-a7b1-4270-bb6a-184d51c22507", "comment": "Malware payload (njrat)", "value": "b1d67d6e7532fdb39c994a03545cfaee6cb855b962a352678e15aabb40f619f4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808610, "uuid": "8a76605b-83e0-4e36-ba90-f3550d7ee2fd", "value": "T1FC032A4D7FE18168D5FD067B05B2D412077AE04B6E23D90E8EE264AA37636C58B50E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808610, "uuid": "c2f3e057-8dfb-42f0-b934-853a02c6e329", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808610, "uuid": "4fd94119-725e-4cd5-992e-008af8876d7a", "value": "384:S+32jKicgGjn5xL5oyUi8i1BUjHfVSYMbO1UrAF+rMRTyN/0L+EcoinblneHQM3P:V2Qf5DUi8uUjHglOqrM+rMRa8NuoJt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772808610, "uuid": "e4250794-6e36-4c37-8b52-8bf8b5014d56", "value": 37888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808610, "uuid": "01cdf16e-3bb7-45b1-ab42-4d92cf07cc49", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9ddb431-196b-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772808670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808670, "uuid": "7c845c8e-75b2-480b-80f8-f07a718d5b72", "comment": "Malware payload", "value": "30aa2c812cf1cbcc81d9102fbfcc1270", "object_relation": "md5", "Tag": [ { "name": "img", "colour": "#89ee14", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808670, "uuid": "037e2adf-2706-4a2c-b611-d70866eb814f", "comment": "Malware payload", "value": "b8aaac8cb1d20035a0abf125a3e29193e6438356cbdf3951d94397dfaa569f1a", "object_relation": "sha256", "Tag": [ { "name": "img", "colour": "#89ee14", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808670, "uuid": "f9b20815-9d00-4fde-91a6-a664324dd6e4", "value": "T17D75BF4F47EA5EABF8355A72E4FF432032A63EE0468ACB5395C03B151057EE07A60B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808670, "uuid": "662f2b3f-d13e-4f05-925a-365b29cc59ba", "value": "24576:iWCQoeDRJ4CPF59o4tL9fkOT8q4ugF56LhAbISq:fReCn9rHS2SbI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772808670, "uuid": "ff5761d7-eee3-4b44-9219-0fdcbe75bf3b", "value": 1624064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808670, "uuid": "5537bb06-3da6-4b71-97b5-639fbda10db8", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "336880f1-196c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772808793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808793, "uuid": "d8618aad-9ffc-4cea-bcac-1aafb2465846", "comment": "Malware payload", "value": "fce57ba0b7d3afb030a6fc608c54362e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808793, "uuid": "8fdefb0d-e4da-40dc-b186-0c82bce93472", "comment": "Malware payload", "value": "f72221fb2f867e6fbd1220ea71ec49e597485021e01a9570b9da8dce59092e35", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808793, "uuid": "aac45ee2-3ec7-4130-ac16-fd4868ded6f1", "value": "T1A8A6394BE8A545E5C0AAD675CA66D212BE717C884B3163D32F90F7242F37BD0AE797", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808793, "uuid": "8cbb94d0-2f75-4b60-ae33-8f2f2da3d49d", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808793, "uuid": "880a20b1-5c91-4366-b8f3-e43fc7356c0c", "value": "98304:m2V9HLDFYjwfGQAoHdArSzdhXw0VZc2Pt+f/KYBiCc0/5E:maDWjwfpQW5ZnwfBBiT0i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772808793, "uuid": "0e14509f-3ae7-4c18-82a5-98e32a985376", "value": 10279936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808793, "uuid": "bdac8d2c-0a59-4499-9b2e-d173eaa34425", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b565578-196c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772808806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808806, "uuid": "7dc8847c-6089-45e5-8904-cf61a57a107d", "comment": "Malware payload", "value": "e270e30c1861ec8b0967fafe03b4a178", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808806, "uuid": "69115e71-1d7c-4062-9887-f5396c826dbe", "comment": "Malware payload", "value": "062c3c93ed5729c7965b7dc1bc56a8cbd024efccaaa4ab90bd701311bda6a90e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808806, "uuid": "3169c78b-a84a-46bf-8703-3ad18cce89ec", "value": "T1FE472A87B8924952C5E83A77F8BD81D832720EF98B97525B5D05FE383EBE4D90A353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808806, "uuid": "28f2bcf2-584f-4e19-9df4-2bce07b5f6c4", "value": "196608:xYDbAzQYKByMJj5q0ZYE0h0GW+D06x72FOW8PSnbbqH:Jz7y0h0sxCFOWyH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772808806, "uuid": "a292a1df-46ef-4140-b3f0-138bc88c09dc", "value": 26149048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808806, "uuid": "f21940a9-b655-4c3a-9e8c-75e1a560237d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c302355-196c-11f1-8a4c-82aee05be84a", "comment": "Malware payload (DDoSAgent)", "timestamp": 1772808808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808808, "uuid": "1ad8623c-2806-4853-a63e-e05076f85751", "comment": "Malware payload (DDoSAgent)", "value": "2b9283f8505ba8fa1b955234af5e651e", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808808, "uuid": "d38e7e9b-aa5a-4e06-8ad5-49c989f483ab", "comment": "Malware payload (DDoSAgent)", "value": "371ded4f85e45cd412cb364146208381bcd8047b9618b09a1a668f467e013996", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808808, "uuid": "ab8e06e5-8622-44aa-a9e6-4f8f5fd8fef4", "value": "T177575B07E8A544E4C8A9D531C662A223BF717C894B2163D32F60F7386F76FD06A7A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808808, "uuid": "697a70c4-7b76-4266-9778-ca56a31d7d6e", "value": "98304:okmMRs2VRBp4avM+SPauph61LTz7ZStPy2jhxKH/3TiCR5ikD6kODTjEkxn60dNB:osVRBpBM+Sjy1P3kXMuCU06xjnniDI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772808808, "uuid": "b9d95cd9-49ff-429d-bdc1-6bd7f5164530", "value": 27775268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808808, "uuid": "cada2bfc-2e2b-4fe5-997c-bbe846a6b263", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40041c39-196c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772808814, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808814, "uuid": "1876f4a5-e7ca-4094-bbc4-0093ef3af772", "comment": "Malware payload", "value": "922babc1b57f529e9e396e6f8c872923", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808814, "uuid": "b974c808-748e-4175-9a43-d603e569ff04", "comment": "Malware payload", "value": "a28d0ecdb4fdd57c86c255e42d17dde0a7842a20d2e4317d0284d6a2cae2fe8d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808814, "uuid": "73cc8785-d9f2-47a0-afca-63c3b362bded", "value": "T15AA63947ECA505A5C1EAD175CA769653BA713C885F3063D32BA0F7282F73BD0A9B97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808814, "uuid": "bfd5b4c0-2e74-4a86-aba5-d74af62da28b", "value": "98304:vChFJoq+K6l39Egtgqp89eZ87P3ijUcjsew5PSDYuuEnC:vw+9l39t9I3iFzwFuLnC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772808814, "uuid": "7e71fc35-459a-4a70-bd47-fa3e6a5c7c74", "value": 10051876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808814, "uuid": "46085c30-c9f2-45e8-ad5c-dd7cd65e9b82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40bc6141-196c-11f1-8a4c-82aee05be84a", "comment": "Malware payload (DDoSAgent)", "timestamp": 1772808815, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808815, "uuid": "7a28ae55-019f-4bac-a7fa-c0b0d0aeb2f2", "comment": "Malware payload (DDoSAgent)", "value": "23bfde69eced4eb3b1ef37430bc6b002", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808815, "uuid": "a3c51186-d3a6-4748-bf88-c345fc2aab1e", "comment": "Malware payload (DDoSAgent)", "value": "0377d82fed702278699764f0a16b5d5fa566581f9f6e4d147268c019293b7388", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808815, "uuid": "5c33b4d0-4ae4-4c63-b959-5b6378c5779e", "value": "T141473B51F9CB04F6FA031D3140ABB22F63305D458B28EBD7DA447F2AF93B99249361", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808815, "uuid": "a89b67e5-a9c0-4965-ba15-648ddf29ee9f", "value": "196608:cRlr9DrKm9aybwRT3Frq5RUuy6x5XZf8HbDTsJKj:4/qbtuRxrIvTsgj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772808815, "uuid": "b10b1e4a-38c9-46d2-b12b-9d4d5eb1e7ea", "value": 26267832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808815, "uuid": "14237fb2-afbf-433d-aec0-abcb68c3a076", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40cc4b05-196c-11f1-8a4c-82aee05be84a", "comment": "Malware payload (DDoSAgent)", "timestamp": 1772808815, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808815, "uuid": "3331f354-7900-428d-83f9-2a80a4c0a9b7", "comment": "Malware payload (DDoSAgent)", "value": "c5f518f180b5178d08b77dfafe0ce340", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808815, "uuid": "d5bf199c-06bf-4b6a-987c-c61b2fdef6e4", "comment": "Malware payload (DDoSAgent)", "value": "007d03943732fab4ca97c45fe367bb043ece03fde8576bef6ce727dc4dd68980", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808815, "uuid": "b98b2aab-8986-430c-86f5-a83b0f10da57", "value": "T155571B14AD856BF6C86D4E3490EACAA512701E1059F14B7A22E0FFACF8772757F478", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808815, "uuid": "97f9a77d-c46c-4815-8054-010621722674", "value": "196608:BSYXnhQqZ7aCNXPvcrIgoz56xeTaSI/48zH9:BSUgozUx/ZzH9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772808815, "uuid": "44bec484-44de-4424-a024-f445f5e3d50a", "value": 29425879, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808815, "uuid": "127c3955-91a7-4b50-9757-cb455994dd1d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40fed306-196c-11f1-8a4c-82aee05be84a", "comment": "Malware payload (DDoSAgent)", "timestamp": 1772808816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808816, "uuid": "6f2b67dd-a26a-4398-a1d9-6e92fc22e839", "comment": "Malware payload (DDoSAgent)", "value": "4704a1f07bad932369a0b7f191512085", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808816, "uuid": "fdf33eab-fc56-4af0-8936-8c4930e044db", "comment": "Malware payload (DDoSAgent)", "value": "1e7d362fdc84b221b948355dcc09464b3de670011190029aab249d458a17c0c0", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808816, "uuid": "ff6063af-5f69-46c8-9f4c-8d337a90cb34", "value": "T154573953BA19EB1EDA28223448B1CAA463791C9580D6A507B741F319F9F307E4E6FC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808816, "uuid": "be9a5986-a17a-4d48-a94d-f0d314ff80e0", "value": "98304:+aqgWz38FqcZ+SjEjrsHxxrv6BZYyD2qDSK6kODox61dhxwk+gdOgxtpu+pTwDjD:+aq738ZZ+2SK06xrGCRYrj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772808816, "uuid": "cfe7c874-1d60-4d82-b117-2374f586dd1b", "value": 29425879, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808816, "uuid": "e31a94dd-e491-405b-8c68-470d2017d5e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bde3e6b7-196c-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772809025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772809025, "uuid": "9c7369a4-1441-431d-b2d4-b72eef5c6074", "comment": "Malware payload (Mirai)", "value": "239d6caf9385d357295b3db9a4a8ee46", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772809025, "uuid": "25d1e07d-f1ec-46c3-9b2c-9e772ee81780", "comment": "Malware payload (Mirai)", "value": "28aba57aca34aff76d73a19845da3797a7c5ccec474bc3620e53ddbc175a737b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772809025, "uuid": "6dc4c7c3-7537-4b39-ba19-b66ed2ced2dd", "value": "T186B30945FC505B17C6C652BBFB4E428D7B2A1768D3FE720399256F30378B96A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772809025, "uuid": "1bdc5840-d6ab-4e67-9b23-3aea8e5cc5ea", "value": "1536:jUK9yqnU8vGRz4VA4j6T9y28Ty6O5FtZpqQcZlCtwywXvqcVuafhPeA45Zvn:QixnUHz4Z+5ypkn3E8n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772809025, "uuid": "6dcc40a1-e920-4d06-a027-c02a8b8a212c", "value": 117280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772809025, "uuid": "713744b0-d284-4f50-b4fb-92ed7733b449", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15f51267-196d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772809173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772809173, "uuid": "84662eb5-6c47-435d-8702-a85ff46d5e8f", "comment": "Malware payload (Mirai)", "value": "bd3ec63331fabbb45884af24085f4249", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772809173, "uuid": "6d738e1f-563b-48ba-b97e-5fbceb4ef998", "comment": "Malware payload (Mirai)", "value": "ad74818a56d1aa0f06ccf4da420797bd80efffae638d0f5183250b7887fe32d1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772809173, "uuid": "9cf2998c-31fe-4422-81ed-6d336aeaedeb", "value": "T1CDC30956F8819B11D5C151BAFF0E124E77131B3CE2DE7312AD24AB307B8A8BB0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772809173, "uuid": "82ea7210-04dc-41c4-a211-f8478d7dc9b7", "value": "3072:f2D7YhjFMX+maR8TcDeRqQV3tNQYciYTG1P:f2D76aX9aKTcRQVnoiYq1P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772809173, "uuid": "4824ac2c-3b69-4cab-be05-afc121bf7e45", "value": 129244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772809173, "uuid": "6f79a6ad-519f-4811-ac1d-30b577993ff3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c92199e-196e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772809721, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772809721, "uuid": "0aff581b-7d4d-425a-9ce9-9a0b07baab4d", "comment": "Malware payload (Mirai)", "value": "6e063db1812473256e35b8358fb129fa", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772809721, "uuid": "d48c863f-c645-4c15-99f8-ef9f28edddb7", "comment": "Malware payload (Mirai)", "value": "8cddf9679c83d10252ec7581586dd9dd333a6018210081dfec47a6324e1cdf9c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772809721, "uuid": "ce039e74-c0fe-4f5c-9ed7-785efd63f526", "value": "T1B8B3194AF9819B12D5C922BAFE1E51CD336347B8D3EE32029D14AF2537CA96B0E775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772809721, "uuid": "6bde5635-3668-4662-b774-7585b513ea73", "value": "3072:4b51EVs47PgAO1XYrou7advNrjThUraCg2j9JWO:4V47PfO1IrV7advNrj+rJt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772809721, "uuid": "03dbe555-35dd-46bc-ae37-dd2ff700cdce", "value": 108044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772809721, "uuid": "90563349-b95a-489b-82fb-2c619abf61e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfa38456-196e-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772809941, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772809941, "uuid": "58cbc0d1-9662-4b8c-b873-8e42cd5410c1", "comment": "Malware payload (Mirai)", "value": "bc162ed909c21c628fd395c2e13480e2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772809941, "uuid": "e0729fcc-ba87-45a4-ace1-9760404de405", "comment": "Malware payload (Mirai)", "value": "d49640c8ff3ab2bc8654447d6b7dd0bc8af450e4b36cb1d7fc1ef5eb0fe77c68", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772809941, "uuid": "2e9b887a-e98a-4596-8723-27b77a263713", "value": "T16EB30945F8445B17C6C666B7FF8E438D7B2A1758E3EE720399256F30378B85A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772809941, "uuid": "f1854f52-6f0f-466a-b264-1e31b88040a0", "value": "1536:p7jnPq8azP4V8YOTIBRvyNOzIuSIwYeFWd/lk68wywlQ3Ym3Tb/V1oEakCxQ:lzPqF41OUBljSIxecUtCa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772809941, "uuid": "cdc831cf-1d6d-4422-8fe7-5144dccd865e", "value": 113184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772809941, "uuid": "c0be4c64-be96-427e-b0e2-13f4ba4c2f02", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f8d6a6c-196f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772810236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772810236, "uuid": "109d9f85-e5f5-4b71-ab2e-80845eb5f993", "comment": "Malware payload (Mirai)", "value": "5bb36fdbe24754522786c850047462eb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772810236, "uuid": "b0a14523-122b-45d2-84d6-0b59b1a72b4b", "comment": "Malware payload (Mirai)", "value": "fb53712105b4972dfac508c7f5e322b28591e768fd6255ab554ec7549f37f958", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772810236, "uuid": "90d42e73-bdbf-43d9-ab61-928319ffe3a2", "value": "T170333C4DF783E0F0DD4B0571115BF77E96349E025124DE7EEB98BE62AE32A02711B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772810236, "uuid": "d285aa59-c865-4531-9c17-a55e20971633", "value": "768:VwheNR1eCZWUJ2S7pRflrFWwqTlFNB5azjYvzNeVMU2331ANA0B7RhuqDV98EN+s:VwOt37pOzwLMU431ANA0BLBCIr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772810236, "uuid": "f8c1c6b2-e62a-45a0-9f64-75f279dde7a8", "value": 50476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772810236, "uuid": "6e449091-add0-4c39-a9c0-f749f171d73f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da022554-196f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772810361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772810361, "uuid": "cf533fde-6a55-467f-9d76-c08aca6f5065", "comment": "Malware payload (Mirai)", "value": "3f9aef2bc3a3ece65412b8f499a26f6f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772810361, "uuid": "10974168-1ac0-4c4d-940d-a44a17055afd", "comment": "Malware payload (Mirai)", "value": "5f2a5ec8d40f23e0954024dcdb6b8f9e82e860c76d2af395a354a8e8592a2bd2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772810361, "uuid": "4da02550-ae74-47ba-bcca-24232f9d5393", "value": "T19BF33969BA0F6C41F2C2D3F9DA8C87E13E1735E3C6778DA1790252EDDBA39D949805", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772810361, "uuid": "765d1fd1-2a2b-4204-bf29-39139e536021", "value": "1536:wdMiHrrc/qDHavM5Dtrg89RPA4b1X75rgmnX7Dy+IfMp3En5p5M/LW:i7vDtrnPTR71gmX7Dy7fMp3xq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772810361, "uuid": "a8727d2a-b738-47cb-aa51-57a5a85ce0b5", "value": 157544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772810361, "uuid": "6c79ec87-1f1c-4d01-a1ce-cc2cce5fc542", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "006eb42b-1970-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772810425, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772810425, "uuid": "ff18c525-059d-40aa-a3ec-18038e4ef288", "comment": "Malware payload (Mirai)", "value": "9217254bc27f7508ff6fa514772fda85", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772810425, "uuid": "3e1e84a4-13a0-44c8-8540-4760a594e8c8", "comment": "Malware payload (Mirai)", "value": "e3c4a7d0624d9e2b1c6a7611e873d90438bb95f56096a2a560e18eb3d0fbcc75", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772810425, "uuid": "7fb4863e-3548-44a5-a9a3-c7277c4cf49d", "value": "T1E8C32A05B30C0D47E1633EF43B3B27E193DFDA8121E4E640655FAA8A91B2D32558AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772810425, "uuid": "194e3a8a-4d48-4be0-8fff-f2467da54b25", "value": "1536:6cB72AZ4ex10JrZqQ7UrZb6wI0vAnjiLVRuzae8Dhq6N2te5f3dyJ:6+B4exMF7oZKJnCNYaYJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772810425, "uuid": "7e9a3664-e6f9-48ae-8fc3-50d8be28aa26", "value": 121508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772810425, "uuid": "388336d1-3f4e-494b-a484-43cdd56a7eb5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb765b22-189a-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772810614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772810614, "uuid": "92947a04-fce7-4bed-899d-f994411e4606", "comment": "Malware payload", "value": "7cda716f787887334fc7bb770ae1f6f7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772810614, "uuid": "7b9b3405-0ae2-45f4-bf9e-a44e44449499", "comment": "Malware payload", "value": "d620a88c923a7d17d7a47fcf3bf017f5357c00dc0a52d19e8dbdc2acafcef326", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772810614, "uuid": "75915732-c59f-470c-a7c8-92a009f3309f", "value": "T1BCF533BB890D6DA4ECC98229931936D4E1406E312FCF9C54EE61F4E6DFF94E44B0B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772810614, "uuid": "6330aa00-28e4-4861-be0f-4219075b0c65", "value": "98304:4XGwA5HqSqnvZC8tNzB9NeOFIPrwVQZQDhhQQb1J7:F/QB1ZfcS0wVIQDhh7P7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772810614, "uuid": "aeac38eb-4238-4dd8-b137-3cac685da4c9", "value": 3614172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772810614, "uuid": "b3a62b0b-d7a0-49ff-81fa-2dc56c0bf5df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6225ad19-1972-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772811448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772811448, "uuid": "ceaa89b3-fc13-4868-bb8f-cdb90ecae72b", "comment": "Malware payload", "value": "9a61b28e0f9e65a7593c0a65b0e66afc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772811448, "uuid": "5d251c81-f8ee-4333-9a06-63e081b07a34", "comment": "Malware payload", "value": "70b7357c180e69b04a8592df8f81a46793cb40de817040281743a2dec1499380", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772811448, "uuid": "a71fc456-0a46-450f-86d7-fc7a2315dc0d", "value": "T1ED93093274AF052A166F436E80427B1CEBA982DBC601DBE8F4FD51595FF4D8932672", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772811448, "uuid": "29144291-6d17-4851-8f3d-12d011f85ea5", "value": "1536:pXyp1xQ/uwMmAIa14oXs/I8epeV7tb73WAxCJCStkb5fvnw05S4jrmigPsCZKG6i:pisIbzEStkbFvnw05S4jruPsCZ96Y/7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772811448, "uuid": "bc03ab88-fa4a-4894-bfb5-f12dcd7cf700", "value": 96308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772811448, "uuid": "c5c93fb5-35e2-4896-b4e8-a2e09d9aa61d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91e72bf9-1972-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772811529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772811529, "uuid": "b6986337-da33-435b-b94d-785a22ac0325", "comment": "Malware payload (Mirai)", "value": "4a5a5b500a26471264171e76addc13b0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772811529, "uuid": "e2571781-e119-4ee0-80cb-f6257ae3d105", "comment": "Malware payload (Mirai)", "value": "a069d39c3027613df89acf77c57d19fc05b1ddb8fa1429f3b9ce6213260e3d75", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772811529, "uuid": "bdec42b7-958a-4682-8034-f17c8c1f3c5c", "value": "T1A1E3B71A9F910EFBDC6FDD3302A9060635CC954722A43B763674D528F64AA4F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772811529, "uuid": "bbb85b17-25ea-4446-98c6-4a91365102b3", "value": "3072:6xjJw1Cc/0s6YAPwenUr48pzfR+JonCy:6xlw1xAop0YfRC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772811529, "uuid": "09c72600-c280-4281-b892-82eee62222c6", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772811529, "uuid": "39ab5e08-3e44-49a2-a035-0e643e6ec266", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fc986d6-f783-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1772812033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812033, "uuid": "79048837-096d-4bd7-910a-698cab05c44a", "comment": "Malware payload", "value": "fc449bb4ba748318897a0fee67b55008", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812033, "uuid": "18693535-1b99-4423-b6dc-ad1886b5bd71", "comment": "Malware payload", "value": "e3a4874547a3f1fcdad409cf47bf3f89e986ba5301a957bcaea7396368c33ac7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812033, "uuid": "d816eb4f-4d7e-48a1-9304-3c1b7cb7329e", "value": "T18A415BBB54E37AA8385A699EB263422854C0F6CC5CE7578CB84C6E35B345548F2227", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812033, "uuid": "2e2e5c0e-a229-44ad-a4a4-7cf2cd728c63", "value": "24:o9qMkpnIDd3Eo+h/s54NvIaNHnJl9vYp1MSQ7BVKfrnvN2DND7DTckM4StL5Ji5m:o9qMyIB3ETK8VE9cBC2RHmi5m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812033, "uuid": "0661326a-950b-4a8a-8eea-757568b68f23", "value": 1974, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812033, "uuid": "8c241df2-51b7-4612-8ff1-8f2e69e44a75", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "beb95777-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812033, "uuid": "72afd771-a14c-4867-936e-ac926ab85edc", "comment": "Malware payload (Mirai)", "value": "3fe106119d31d4dc8ea417a6bc5a38bc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812033, "uuid": "f0725900-936a-43a9-9e0b-0ad483c73380", "comment": "Malware payload (Mirai)", "value": "b991b6e300560636ded835eb1d5c878278d393591ab511943404ac33b1481991", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812033, "uuid": "040e53ca-2c83-4cda-92e5-ba55a01f6c32", "value": "T19EF06DE92224C322B4A1462934E02BCD93CA5FF7A440CAC9B1314B1AC1885983EA1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812033, "uuid": "43afc895-33d4-4e83-b8e3-7f61d4a4ec82", "value": "6:HTB0cEwC7JB0cEw4xXcEC1hNpB0cEdiJB0cEd2XcERBhNpB0cEDIJB0cEDIXcEDS:+HwigHw45e0HYgHGRB0H8gHaXm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812033, "uuid": "56b706b3-610c-4582-9762-3b3b16aa19dc", "value": 522, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812033, "uuid": "610f201b-c677-4851-b505-49b5121cb1fb", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bed90a42-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812033, "uuid": "abe2e130-20a0-437d-bb00-1d25ffb547bd", "comment": "Malware payload (Mirai)", "value": "0ccb9913a51bfe9ed7a22719dbb7a99f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812033, "uuid": "a6b56efd-e0f4-42c7-bd98-d8fa27655425", "comment": "Malware payload (Mirai)", "value": "91aace515ca82254eecca8056a4c4c57b7f72c0d0ba7df4d7c6adcbdb994bdb3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812033, "uuid": "f3e1b11f-d5d0-4054-88d8-e75b21fa9dd4", "value": "T113F3186277B60A27C1E4A57AB1F75333B2B947C914ACC60B3FA11D8D6FA46503113B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812033, "uuid": "2a6c310b-d942-4487-bf52-4c9fa30450c0", "value": "1536:jwoKXQtmrw8ZYYRD6NZ/NbQsgHjuVVQWeT6p2Q7cRwfw+HSRsytaJte3+Iq2hfn0:jFwPB6NZhhcWLgSfhyN3+bRz5YZ7i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812033, "uuid": "0a204b93-8678-492b-b099-6e1aaf11c0b0", "value": 158892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812033, "uuid": "70458273-42c1-4663-87b8-2f6272448272", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac26ea59-16fe-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812037, "uuid": "b89d4287-b570-4869-9187-dee949f58736", "comment": "Malware payload (Mirai)", "value": "81951bd4758d495ca424ac721e97b184", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812037, "uuid": "0d618f27-537b-4821-b64c-52476272cf9b", "comment": "Malware payload (Mirai)", "value": "8ecff67913822cba865d3f69777425e16c8eee250e13cc88fd2c21add4d785d0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812037, "uuid": "a4900934-ef68-4400-99b1-2ce30adda4f5", "value": "T1B37182D42370C3377CA2463614B95ED863C5AEE791D58EE0B0BA3F61C88DE4C2E947", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812037, "uuid": "2bed42ae-f5dd-44d8-b937-df31d8405f32", "value": "96:v4BB4IX4vl41B4GTn45h40j4o54zN4sB43t4GkGO4ez4GD4kk:UW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812037, "uuid": "0999241b-dfb2-4449-891f-fad8972b4c88", "value": 3795, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812037, "uuid": "ad4ad999-4525-4258-a5f1-521806ff8385", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c133f769-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812037, "uuid": "84429cd9-0a5b-4e18-882d-1613051072c4", "comment": "Malware payload (Mirai)", "value": "23a183211ce13caec85094b71b2a0b24", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812037, "uuid": "ec7e8f63-1aaf-4ee3-8b55-9a10678a0fe3", "comment": "Malware payload (Mirai)", "value": "20fa2340667b07792ea3820c15f42212030b15e2f27b504ff7503cea863a8391", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812037, "uuid": "aa4c7c18-9fb6-415f-a8eb-0a383b3a3728", "value": "T1A3A36AC5F683C4F6EC1311B5143BB3339772E539503ADA93D3A9EA33AC922519A5A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812037, "uuid": "5e5fbc86-b6ec-4abd-bc9f-bb1308ae750a", "value": "1536:qWouPd9qZlyR5hHxiNdVTqUl8KdcZE+vxSzkr:OuPrqZ4ZxCjqxIcPYK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812037, "uuid": "e1db5258-0b6f-44ac-ae2f-afa1b34bb9ad", "value": 101548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812037, "uuid": "850a7623-7e6e-4e2e-ae4d-76f55535be5d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4a97e47-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "f96505a2-25a6-4b7c-90f5-8a101cdb964d", "comment": "Malware payload (Mirai)", "value": "06de3b5ccae65d45a2a942ea4d3fdf94", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "093dfde5-3272-4ef7-8d7f-3499dbf75da8", "comment": "Malware payload (Mirai)", "value": "971b2da958636436110aa3ed29eb3000f3b3645ece4e9e049397587eb4c07d23", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "ba11332c-1845-459d-9b40-e666896f340e", "value": "T1F2433C92FC9245A9C7C517B6771A978A336263A9C2CF7313CC080B5176C9A4F4E67F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "34776a30-9129-4542-85ae-c7b932b55ffb", "value": "768:bwjRWcVgYik7nshvFUhhyE8dGLf/qkZzlQr9JKrn4vbk9Mz2F30ntzgE:boRBVgYik+veKDk7qU5Qr9JKrJ9cOy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812043, "uuid": "76096c9d-21cf-492c-bf60-3f97dbb6bd89", "value": 55324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "9867138e-fa6d-4328-99c2-6fd794f268b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51d85ccd-03eb-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "251c58ac-bf83-4b5d-b323-1faf88093bbf", "comment": "Malware payload (Mirai)", "value": "4587160621f002b318b71a60d86b876b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "a64bc15e-15a9-4799-83d3-b084a9937d7a", "comment": "Malware payload (Mirai)", "value": "31e9e337bad2ad58ecc00d3056047e61f6df5d09be02df5e73118d1834ea6cbb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "9c46f125-c2ce-45d6-b414-32e710c1da1c", "value": "T116D44A55B8419B95D1C06BBBFF1DA34873132B38E2EFB1069D186B246B9BC1B0F7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "99f1d5fe-8fc5-4e68-88da-6fce6d6be21f", "value": "12288:r+tkWziqHcEdgyAgXJHC3oSvEaK1RoGB5gCpWPI6VQ0nfajyAsm4bfKjC88G8h2b:rurdgylJHCkEGBOI8Oz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812043, "uuid": "9b7c7835-115f-4bd6-a61b-2dd21b70115d", "value": 605596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "7e6d1ca6-e39e-4df9-b629-813e9c029894", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4ac4095-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "063c966d-c34b-489d-a545-af18b3638cb3", "comment": "Malware payload (Mirai)", "value": "44c4dc4c89ce5f267e1b6f10493653b2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "1f4652b6-81ae-4261-866c-19d29a511625", "comment": "Malware payload (Mirai)", "value": "90f05f640c1188739e8a0e8ba0d99b8ca8170cad625d860c794853c7f8ba278f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "7f09b124-ace2-40a9-a47e-b02cb20761ae", "value": "T150933B5AF880DB16C6E5267AFB9E118C332207A8C1CE7106DD149F3577EBD5A0B7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "1486ea1a-4d69-467e-b7e0-d7a263b9dfb6", "value": "1536:U4J3XaYGxA5tUZFcWVE4blFlycjJMDcOvnaWceSdq4RgO03KiZDXVbmN+Hq7Yw8m:UQXxMpE4pFlycjJMDDaWZzM03KiN9mIm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812043, "uuid": "b98bfeae-bdbb-4330-95c7-cbe9b9dfe407", "value": 91436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "c884b062-382b-438f-aae6-58090cf3f5c0", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4b0ac7e-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "bc82e1f4-9c23-4b32-8183-d698da1ea443", "comment": "Malware payload (Mirai)", "value": "3d34a6b35c2b1d35897cd1692966645e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "4151d39c-068b-4929-b4cf-b31765e77b99", "comment": "Malware payload (Mirai)", "value": "86808d452a5247486788f89b5a87cb03071d6404e6877cffa6fcc87dc03b0df7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "9c3e2fd2-1084-43a4-b180-3b1d77df8aaf", "value": "T13B043A45EB404B13C0D627B9F6DF424633239B9497E773069528AFB43F8779E4E22A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "3c92e115-19b2-4064-ba02-dea0a0808071", "value": "3072:v8Fh7MtehGB9ewa0WauwBrrWgtwy7X3yaooOM/RXiIkYS:qh2eheQwa0WauwBnQy7X3nVOM/RBkYS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812043, "uuid": "d515e2b6-b1b5-45d0-a371-4988d9510fab", "value": 183859, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "6c49866e-74a7-427e-aae6-2d5601b43927", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4b497cb-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "eb3ff50f-4012-448b-b110-90f42676ef8f", "comment": "Malware payload (Mirai)", "value": "e522e90cc96307073b10c61ccc46ee4a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "199bc96e-d578-4893-a49b-be9d1767940d", "comment": "Malware payload (Mirai)", "value": "f01285fc815c1c8bce75a56604ae3a2b2a6b196274a1242540533aaef0e8705d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "df8c1134-f232-4e5a-86b2-bc141ad363a4", "value": "T18701D8802172237434E6D8EA4A330D3C75ED9497BDC71EFCB9E5A0E60E99D01B4820", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "944ab7fa-5e50-4da3-9ed9-9ad2abacd0e7", "value": "12:YkF1kcClZF70SKUbCHFAUbCHFHUbCHFWAbH6FSAiabH7MFM5gF/bHbAbH6FSiia7:ZDkH/FbnbCHF1bCHF0bCHFWAbaFmabby", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812043, "uuid": "a22bef41-5a87-4912-8251-d7d93cf70b8b", "value": 762, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "1e33b33d-4ae7-4371-b919-6c8161c50f16", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af911719-e64d-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "20c32e74-0157-438b-82ae-36fb20da40d3", "comment": "Malware payload (Mirai)", "value": "de6920b4788c93c8cccd301acbd7c76e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "1c353751-b652-4226-81fc-f3185645a049", "comment": "Malware payload (Mirai)", "value": "2f5bb3f58d8da555b92f9bcef5546a530e5fabb1861e7199d64be747fe7dc227", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "225bb093-9c5b-495d-b8ce-0b8f53b3a90c", "value": "T17D53027600EAF92CDCC063359E1B6A87CFEE68711E7C2113183935DBA8F53866925B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "6262161f-387e-4205-bf01-43d714d516ed", "value": "1536:3pX30rIVw3E0wrkLOnpP7OrmCoLJPHOTq1kQy2pcPFZQFskCMrAQd:3ZMNhOnAIuT+kQy2pTekCvQd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812043, "uuid": "2de6a0ed-e8e2-4289-8343-dd198426456f", "value": 63880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "17cfae87-5657-485b-95a5-d36ef6defdcf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4b92580-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "4dbb2590-07ed-4444-957f-7691d78d8ea2", "comment": "Malware payload (Mirai)", "value": "37f6e92be6dad249c5fb6af45abb9f9f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "d2267fef-5596-4166-b136-fe68a27d8912", "comment": "Malware payload (Mirai)", "value": "14f5f0adadc31567b70d1fd453afbebf68c7f7a469fa83cb4a670afa870688b8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "cf03fb35-46d9-47d2-95cc-4c26bb1548a4", "value": "T16D03D691BC824A26C5E4137AF67E17CF332063E9E2CBB217D9115B647AC690F0D22F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "c087ae14-3c04-40d5-9986-e4b800861962", "value": "768:QnAj8PFqTSzrCk3mjqlm70FqlKwsXrl9RORY3Cg0S1sTPhPQQpv4ta+EbfwWSY:QnAj8PTCk7PE+nKYl0S1apQQp2fWS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812043, "uuid": "cee97582-0d1d-4083-920f-4e182611d23c", "value": 39028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "90c0301b-62e7-40e6-b744-dc90c2a0df48", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4bf6055-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "05f51d2e-af6d-47fe-b547-e3a8c9dec3c6", "comment": "Malware payload (Mirai)", "value": "6f3d8e76b17223e315eba541bcabf7e0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "67b6bfbf-98ac-4b7f-af86-281eb1dc02b8", "comment": "Malware payload (Mirai)", "value": "e06bab7251734a687b55b2cc8e269e8e079db4fc74fbf2597509b5e7a0770bd8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "c32276b9-3822-4681-867c-67b915686396", "value": "T1BE935BC4F683D4F5E89701715037EB339F32F1B92119E642D3799A72FCA1A11EA06A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "a5105098-7315-49b4-8c25-1f80f72d6508", "value": "1536:eViCPoNcMmfW+B8hSgIa/41Qmikq/fdKcDSeU8MD/:miCPoNcM5IlgNAQxbfdbOgs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812043, "uuid": "057d22e1-8e50-4a33-85bd-186179684fd4", "value": 89000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "126e169d-0e84-4280-b2f5-5800c2d9175e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4c51032-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "4638ac23-d7c5-43b7-96b7-74fa5d7cd9c2", "comment": "Malware payload (Mirai)", "value": "8a91234dc92176f46f586dc0cdc5de47", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "336d796b-f2fd-45ba-a8c4-13d7f3ee8ebc", "comment": "Malware payload (Mirai)", "value": "6d0aee6ceeb84d69a7098c5c531971ea7715f1ebb820612564ed39fe3c1f9c8a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "ebd8fa0e-0012-47b5-b943-3bb0019390d6", "value": "T1E5935B13B9C480FCC889C13087AFB536D963F17E1279B19B73D4EA167E8DE511E6A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "7d11e8ca-c4ac-4400-82c3-fc4c43c99fb9", "value": "1536:Ac50J45j1WS60TrxMQQ+8TW4yxAw/1h1ss6fuftHnRlGJHaBs:Rf5j1W0Trxh8fyx91h1ss6feHnvGQ2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812043, "uuid": "906c869f-9084-413a-bf5a-67d118f1190f", "value": 88928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "ff5a34b0-29ac-4183-b93a-d79ec5e453b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4cac66b-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "3eb7e5c6-dc95-4c01-a80e-0abc4c9584c3", "comment": "Malware payload (Mirai)", "value": "ac02f5c762f2936d0eba481fd6d5bf2b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "5180ea7d-aff9-4e51-9486-b8152a8fcddb", "comment": "Malware payload (Mirai)", "value": "a00ffe0dbb58cb90d39b35e2b133e390ec177bf0591a1d67083bec1a225da6f8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "33364a24-0a2c-4595-9e94-45e2f3f81a04", "value": "T1624158CB27930E712D63A9A372B50804B185E1A594D1AF04E9EF7CF44D6ED257788E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "0a2605df-d789-4f35-88e0-a8178823814c", "value": "24:vvyd/sl/s8/szld/sOCM/sG2G/sv/s4BHZ/s5/s5h/s4/sE/sjC19eH:v6GOLRGOMfR8AHKqQfTjuQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812043, "uuid": "e99ee9dc-03ce-41f4-8840-0661bde1573a", "value": 2002, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "300fb070-ac75-4fc5-945f-8a41ff4b695d", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4cd1254-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "3554d08c-c617-4b9a-8c2e-0d57992a909e", "comment": "Malware payload (Mirai)", "value": "568500e2dca4941489be01a8cfd63f12", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "158f2311-b5f9-4a5a-b148-822cc6e3f662", "comment": "Malware payload (Mirai)", "value": "1679d43b3c45312369aa2050559f3dae7e7213f43ae023163e263cf78a63fd68", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "a454c84b-ddf6-4899-98b0-9d0cd6e1c67a", "value": "T1ABE32A46EA418B13C0D61775B6DF42453323ABA4A3DB730699287FF43F8679E4E23A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "417ad5ad-fe5e-4376-9d70-9f3b979f12bd", "value": "3072:03DeG9+AYBhQeqHaPAn0DG5OCYzUUtBfxn0DYM/9q2KzC:03DeJBaDHaPAn0DGzYvBfxn00M/9qFzC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812043, "uuid": "b273776a-ff77-4530-8926-a9f67685f378", "value": 153730, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "3fbff46b-767e-43b1-9759-728ce6445c84", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c5d7a34-e64e-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "329f409f-5cbc-48a8-9793-409b7122842e", "comment": "Malware payload (Mirai)", "value": "e99a093166ada1a3c85209f250726432", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "c5999029-4d3e-432b-b236-660c28d086b2", "comment": "Malware payload (Mirai)", "value": "6a8e8db5ff12058cb13c5fd6d16ca1063aa42db668583c3243b2ad45823e13e8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "ba45bb66-ca69-4a73-9fb6-f09afc6a1e91", "value": "T186630219CA7576D7E64C9B39002E82E08829D4D3499A0227B6EAC3F2FE0554B4C5ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "315172ef-3f84-48c5-82c1-1ea09d2de608", "value": "1536:ovphW6BGqa1u2ccoyGCQH0kCKBCmF0b96KT1g8Nwv2RYvBkL/GEq8NT:+eu2Ro2QH3VC1jwurOt8NT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812043, "uuid": "5ba1ebf2-f33f-4a31-b50c-c98a4c361fe2", "value": 70420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "d5f684f2-3db0-4012-8056-10c39f64206d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4d8e0f9-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "a1a8088a-6e86-45db-93af-0e363e7af132", "comment": "Malware payload (Mirai)", "value": "bd186ce3a4c51af66ecba71f9397f2be", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "13f5042f-e174-49f2-827d-8d41d7270f8d", "comment": "Malware payload (Mirai)", "value": "6150972857b45f29dd37d503a1f90a5c833e4e0419a10ecbf2342931677d0231", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "98b01734-3cc6-498f-afe3-93b82bc81971", "value": "T113E3F845F8418F17C6C612BBFB5D428D372A17E9D2EA71039D216F203B8BD6B0E365", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "34de7e20-9436-417e-9457-6721aef47944", "value": "3072:J/RfCNaL2tGeQaZdSvfleF3pc2k7X2SwfjrugMhAD:FInZQ+SvfUpc2k2SQMhAD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812043, "uuid": "00f1d90d-9108-4912-9b56-3b381b5fe813", "value": 145448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "9c6ad0ba-9ff6-47a1-b28f-9cd81b72487f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ecbe01b-1839-11f1-8e4c-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1772812043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "3a0893ad-a476-4622-b82d-2d707578260b", "comment": "Malware payload (CoinMiner)", "value": "f61b1b6aab4b2f0ecbcc86c9f9ed583e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "b0dcd1c8-fe7a-4690-b227-c26cb1eec35a", "comment": "Malware payload (CoinMiner)", "value": "bc4b8678d0fca85d3f80017b13e87f9b3eb8a279afe7f69db8f4fa7d65c3e5bc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "589c6963-ab93-435b-b0c3-26a9dc19213d", "value": "T19A55333B879BB6DBE1E7D2B04913E4C88B3C4A6F55184F02836E947B928723277193", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "17a71cef-79b4-46f6-b397-c10a13680081", "value": "24576:BhNOWAYQYpvO3xm1p0zWjHGuAsY5+uB3cVvV01nQNhaLv9nHrp3qpO6LQHcCK:B9AiZOBm1SuG3ziK1neaLv9HtsLQ8T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812043, "uuid": "0c243a7d-469e-4d35-bbb5-e4f9d88744a0", "value": 1309484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "b5839326-943e-438d-92c2-d787ac3b9bcb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4dbc02b-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772812043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "e59a6561-2db7-4534-8cd7-1ae8f004ad89", "comment": "Malware payload", "value": "c1ab5f9f46449d4d9e1f6cb803a5c3af", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "dd69e05c-0792-4d3a-bdda-6da7da1d4d2c", "comment": "Malware payload", "value": "a14f3b15d998a9a37fc4949280c07c0d33deb16f31f50883ff63e9c3cac64ca5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "86221b29-3031-46f3-8888-0dca868ccfa8", "value": "T1F0514F9A42848BB1D70DC55EBBFA3274E94AA08357EEDE0CAD44882D4ED6D4C7286F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "eaaa61de-292a-42b4-837a-de121a5938b9", "value": "24:NQ2JMPlbiBXAuZ2EBEnE2EhEaLZbw0zJUfwzhM3G:NQ2JMPlbiBXAuZ22cvyVZbwUzhM3G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812043, "uuid": "a7e7cf27-a88f-42fc-9f01-224fb23e3e48", "value": 2907, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "8bce096e-631e-44c6-be6d-ccaac178c4e9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4dcebf6-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "6af4c852-27b7-4eb0-950b-dc924989e3b3", "comment": "Malware payload (Mirai)", "value": "c793fc330da9d17ade538c1ee9c2227a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "281c9d12-aaf7-452b-9468-b7d2a67b5d26", "comment": "Malware payload (Mirai)", "value": "8a4c1bf89270c38f910c2a24d554175c876a7a1e25a86e5b7def2b2b905cb4a8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "4710648a-f0f3-4abd-bc2b-75bc2b15f3fd", "value": "T156C38DB3D8296FE8D110D9B0B4B48FB82B63A58541472FB965ABC3B41487D9DF500B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "a32a1270-597c-40c8-9585-fe293347f6bf", "value": "1536:kmM4DRZqJO8NUz0Bg/Rm5eKUFEHzr3mRjiH+6VIF0/HfZa2W0Q:kmM4DvqJrNUMbVu0xH+TF0ffZa2V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812043, "uuid": "64853bcf-9325-4cf7-9e3b-92c67fe9c5c0", "value": 129096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812043, "uuid": "3d994133-0fde-42c7-8125-35050ae3a01e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4e030a6-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "ae60af17-1d10-4ae4-bba9-05681adab68a", "comment": "Malware payload (Mirai)", "value": "5a3c1b8114cf3e4f31c68f9b7a0abf2c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "38e4f7b9-14f1-48f5-b0bd-9ebcdca6259e", "comment": "Malware payload (Mirai)", "value": "d8f2e5562de49100afd32802b2e6c648deb77c4a7f8a6107cc0d213cb6a7e5fc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812044, "uuid": "ffbfe35f-a66c-41b6-9123-e17bba98870f", "value": "T122E30A56F8819F11D5C111BAFE1E128E37231BB8E2DE72029D246F747B8A87F0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812044, "uuid": "ebfb1ed6-f5fe-4b96-a198-3e987c077d7a", "value": "3072:GkXqtOm1O/bN6UpXzkat8n2MkfBnexxtsvfwBB1:GkXqc/bNVXgaU2MOotgfwBB1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812044, "uuid": "9d6ed2d7-d8ee-4837-9f49-4e3b1f5763cb", "value": 149308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812044, "uuid": "1b999fa7-cf3d-4b83-9359-ccae64a689b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4e163aa-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "f2711e08-4c28-4042-9fa3-bdc6dff46166", "comment": "Malware payload (Mirai)", "value": "f150424f91b2f2b73a10610c069c3424", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "34ea3fba-0764-4217-ae30-43ed50de3c2d", "comment": "Malware payload (Mirai)", "value": "f98026a7081ac332dac91822baca49491f7fb87c5fa649ef3f54ecfc55c34c78", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812044, "uuid": "a3cbfd55-4603-4e3b-be42-fc07f18ac5a2", "value": "T1B6E33A06B71C0947D1632EF4363B17E193EF9E8131E4F640256FBA8A91B1E321646E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812044, "uuid": "3b717e10-4d05-4ff6-8085-4e5bc041f91e", "value": "1536:eFskQLQQVKV4RLUzk2qPTYxSWUFN5fy5Xt3eXIbxaJZo7kKEJg9RRAdAWfC+nB88:0skQLdYCaz3q0x+VySXIbgk8nHsWP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812044, "uuid": "359d3640-8000-46b2-bf22-e428568266ca", "value": 145604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812044, "uuid": "274cdd5b-2be1-479c-9cdd-8d9c704ae535", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4e2558e-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "1af99931-506b-4895-95dd-13cbffa6ddc8", "comment": "Malware payload (Mirai)", "value": "5f14ddc6cc66c69ebaa6561afb03b439", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "6f0b4a86-0f8d-40d8-b00b-ec6b2d5e9728", "comment": "Malware payload (Mirai)", "value": "1dee67789e64a36c32b8f3e7f45d899aef5b9f71214e08954759887658177674", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812044, "uuid": "c876ef18-24a4-4f56-8a39-d78af9041635", "value": "T12EA37DC9B283E8F3E81704B0603AE7779B72D46A2219EA86C378DD31FCD1541D527A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812044, "uuid": "4e813273-cfc2-4c73-80af-ee5b365494a2", "value": "3072:fix33tTBcahQfaQsPZptxfyZZ00WYIFpvAclU:fS33t1cahQfaQQZp/fbHpvA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812044, "uuid": "87392abb-3bb0-487e-b61c-7ebf8e310946", "value": 104552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812044, "uuid": "95f62fbe-5fa3-43f4-adc1-277eddbd97f9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4eec212-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "622962ca-9a3b-4f9b-9215-2c5fae84072e", "comment": "Malware payload (Mirai)", "value": "56f11a020dc69bae62fbc327987ec57e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "a5e0cf0c-7569-4e2a-bf3a-fd3590c2bd8c", "comment": "Malware payload (Mirai)", "value": "0c1dc0c5ab0a63a964a8114860c58d7a9d4922990e13414abdee19cff4044c28", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812044, "uuid": "a81aca14-1cf7-4c31-8d0e-2a8efa245297", "value": "T10114E81AAF511FBBD86FDD3742D8071135CCA54722A93B3A3178D928F54A50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812044, "uuid": "136a809e-8fc2-42de-8bc7-d774ed5b643c", "value": "3072:tTPVDCa7E+0nf5khQ6ecSWvkKL8+jSzFB:tTPVmqc8aWvtL8+jSzF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812044, "uuid": "b2d08892-a575-42b8-8184-f6a2c602e599", "value": 197636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812044, "uuid": "68add3cf-9d15-46a3-ab4d-0b7ed5468f77", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4f47d36-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "f6b8b5ba-f1fc-457c-b230-2e8696b0374e", "comment": "Malware payload (Mirai)", "value": "6a107fdd75fcb5e4365483faae006c47", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "7e2a73d2-730c-4e79-b7b1-60ae28c2d8e8", "comment": "Malware payload (Mirai)", "value": "8ef30ae2c8ab8c2f8d1e3a91f15cfed373d499e15902f1e2634cb3aba1d363fc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812044, "uuid": "72e648a0-41c4-45ed-938c-ae76942ddcb2", "value": "T16014841E6A128F7DF6A8873047B74E20AB6D23D617E1D684E1ACC5105F6039E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812044, "uuid": "d611cd46-223f-446a-89f6-7454586254a5", "value": "1536:lAgcoS1qrywSAbwPqf+yDbPa61bNYKrnEaMzzMQ+RmdqHU+D7DsYOoHPancK43Nl:vcoSZiw+P62dUosqPL3NVeqNJx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812044, "uuid": "6b460e93-96f0-4b13-b9fd-29b21cd9a8b4", "value": 194276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812044, "uuid": "7c930bb5-fbfe-4a2a-bd89-e32d7fb8bfa5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65fe4dc5-17a1-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "677628d4-48ba-4bf6-9f83-78a8c15b67ef", "comment": "Malware payload (Mirai)", "value": "6641328edccdf15f1ca03d3d291571a4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "cc4e99d4-0103-4e26-b4bb-92ebece3eee6", "comment": "Malware payload (Mirai)", "value": "3669ac19d7ca04e7de7fee18b07ae0ff08ba9c9f1f1ee4b44ba85c79769eaa92", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "d75111e6-733f-498e-bbc8-ee1cd6da3876", "value": "T182E36B42EE418E03C4C51775BAAF414E3322A755E3EB73068D18AFB43FC6A6E4E671", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "99480375-7ac3-47e7-8c73-0c7c6b3efde0", "value": "3072:vv/qPbgZkQxQzevcluDFNbtpy/r7MNuw7ir+BKM/98rh:n+bgxxQzevclupNtpy/r74uDr+oM/981", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812151, "uuid": "5c5db9ff-806f-4f55-8397-37b7fa8fcab7", "value": 148990, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "bdbdd626-2866-487e-8f98-606be00a96ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c5a1231-17a9-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "22b73210-0546-4d11-becf-8192e176de34", "comment": "Malware payload (Mirai)", "value": "07e8d3939a17e1a85b43304ce58612bb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "bafd976d-0599-4b0a-b3cc-64c5c2cc6521", "comment": "Malware payload (Mirai)", "value": "92a65e4fa18cd21fac7a1b63d19793de325807f2b75781ac56feda3b90d2b54d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "dd052a02-c3bb-491a-8cca-cc7cb577ad19", "value": "T17393834D2E219F7CFFAC823547B74F259248339A36E1D584D1ACEA021D7434A742FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "20294bad-13ab-4493-a10c-ca71992cc5b8", "value": "1536:hJJIw59EG23bgd9HkAcH1gOx+MiCpulQ2TIQ0IV20EWibv/HnUhxbfbCDbDbPS:vuw59EG23bgd9HkAcHjx+MiCd2TIQ0Ib", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812151, "uuid": "52adbcf0-bd25-43ba-8487-7a73b7c93039", "value": 97368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "eb9b97d8-7047-4b41-9aea-5b7d00328211", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5ba5e6a-e64e-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "5e892459-6afa-4c56-bf49-163b6dc68710", "comment": "Malware payload (Mirai)", "value": "c1d55410ac1cbe0d7875d9e969b82800", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "5dd34397-6a22-4a73-9a20-80bc40f15477", "comment": "Malware payload (Mirai)", "value": "ac23b0381c0287bf16f0806c2bc3b0c804f02ea013bd7cf3d4922d3b87f5a988", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "d78d416a-f01a-45ed-8578-05df2043e2ef", "value": "T13F147220FA0663B1CC731A34A79A2E5A6E7704559FEB26312D1F533CDE628509B31F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "2a980681-3a54-46c2-8e0f-79e234087d36", "value": "3072:dcHZcggL/tJODaj4MwnKBDM7zsCJjL1lCRPUKC:dcYJJdkM2zs8jyGr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812151, "uuid": "e818e0d6-aac1-435b-a3ed-11822466d31f", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "5ff24fec-d24e-4712-9ca7-fd4753950445", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3238af58-e64c-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "04effd8c-8cdc-42d8-89dc-6b5f9930bef1", "comment": "Malware payload (Mirai)", "value": "01c1f785daf3af3f003e35fdf936656e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "e9481227-a70f-47ec-a6aa-d5ec1d0dc27e", "comment": "Malware payload (Mirai)", "value": "9c96b625c15c841588e1e8222b1b53e49108c80bf2af858d120fa0213324b6db", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "afd929fa-5c3d-4fc4-897a-e399f21cf6d2", "value": "T1D9D3CF32E0082DA0DD2116B43476597C0340DEB40BD59243EFBEE5AE28B7DA57DEEB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "2f9fdbc1-6290-4133-b6b3-8fb6f22fd70d", "value": "3072:kNKJV+x2AcXkImnaWwSlSHVv3WvVmGRhC8d5UO0ZgG:yKJIFai0Vv303Lpd5fOgG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812151, "uuid": "df137cd6-d519-43d6-8fae-73b309eedafa", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "4b63c680-f79c-4a77-a6f6-080b07d2b0f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e30e3d9-e645-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "c255d794-f037-479d-a0a4-0729699e1f30", "comment": "Malware payload (Mirai)", "value": "e561d94729bfac963db984d98b01b671", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "e2c2c667-dfc2-47c6-95c3-354a0731f559", "comment": "Malware payload (Mirai)", "value": "44182a22c99b651a77310586412792393a6e439bf6d6b50b2885c8f3c038d53f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "c29a36ae-fcc4-4c9c-b3cb-8396435d9d77", "value": "T1DA5301738499F97ECF5903320589B685111C86E037CA52EA1CD2D22E645FF32FB49F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "63458535-5a2c-41f4-b159-74aae7eeb095", "value": "1536:JIBTmnVuc6MxFVyDlDXwe5wDnQeVpl0zLkg4azHq:JgTmwFvDlTwe5wjQer2LGazHq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812151, "uuid": "ce933a08-6aae-4537-9867-7d250208d300", "value": 60748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "3d1fc405-cc89-453f-960a-1055830eabed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1d41cbf-17a7-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "951f5ab7-5277-434c-83a4-7bfddc2c4879", "comment": "Malware payload (Mirai)", "value": "3d5e93b7bb0e406db6d026713d96056c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "c05aba14-b12d-4233-818d-9bbcaeb7a248", "comment": "Malware payload (Mirai)", "value": "cc82b3051e31143956d3e04c3de9bd03f5a9c3f452fa7e6596ae5741a9e3bec7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "a68ac6bf-f376-4607-a6be-c09529ca7d1e", "value": "T167A3620A7F610EF3ECAFCC374A992B85148E651621997F75BD70D818B60B24F19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "353472bd-0cab-4960-8648-3e0f6c9d030e", "value": "1536:noXVScL2f/0poEgA1ArLeibeUoo1/ON9MZBdifvDr:oXVScL2f/0poEBArLQfM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812151, "uuid": "b90fea60-ffd7-41d6-aa58-cb32abe703db", "value": 100552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "ece69398-cdc8-4964-8e54-12c8ff4c3401", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "765031e0-e64d-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "68e74bbb-36c7-451a-a73d-d1ba24aad301", "comment": "Malware payload (Mirai)", "value": "c4e9d9e34502490a178c74c5bf1a08ee", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "478ddc25-881b-449a-8dc4-4914ceb3f8c9", "comment": "Malware payload (Mirai)", "value": "ac2f5faf62a144cee973138b94d2100fdc3766e3daf4f343c98f2fb7d9070f4c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "9817cb5f-4df2-4a9c-a675-c9dda29dd4ef", "value": "T144B3E185B210AE55C02672FC7187098093B27D7B4B9A550B44B3F5B46EBCCD47E0BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "dbec79a3-06bf-4486-a04c-29d3bcc6fb90", "value": "3072:RQXVGlJAO+/TeLkb375IOIu5Sx+FKwu4:Vx+/egr5hU0KwH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812151, "uuid": "a348eaed-2603-4b9b-bde6-0aa1a4e8d7d4", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "838dafe0-d051-4f71-ab41-d6c19ea4cc46", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66e6af72-e64e-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "f22eaa0a-67b9-4b00-8198-0e91358a3b3e", "comment": "Malware payload (Mirai)", "value": "ffa2b20fa7550a7571b50393b98319ba", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "2dd2ab7a-5637-4faf-920d-db032eb6c195", "comment": "Malware payload (Mirai)", "value": "8048ef63785893266055a16310b923c8731b4d6e9c51d2baba471a8c3f53de55", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "22253abd-cf3e-458f-9a47-f05496b04791", "value": "T10C6302789688AE23EC6DCE3379730103F3E5C0C9B7E5F234499560A413199EA1DAF1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "789667d0-3bd3-4f6d-9477-fbc41f025b91", "value": "1536:w2JqSNCwvWKw03nl2srbe2Oa6ZQbILktW/rP7:kSNpuy3nl2sHwvGbIwyrP7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812151, "uuid": "e735db63-a5d2-4c89-b728-6d866777cfd7", "value": 70812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812151, "uuid": "8f34b4ea-e27e-495c-b654-328d94d0eef4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05421164-1974-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812152, "uuid": "118e0947-1a3d-427f-80c2-c39173c12694", "comment": "Malware payload (Mirai)", "value": "a89b00f49f546ac72b8303edf38a8ea6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812152, "uuid": "b0eaebc3-62ac-49e6-9c89-743faaf6c846", "comment": "Malware payload (Mirai)", "value": "e460b85b94571407a08ec020e542cfd546748642b3e99fae490a4e42e5ad3893", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812152, "uuid": "28563e57-1311-4750-aaf3-e25c9e2e0d36", "value": "T14CE34C07B5C180FDC49AC1744BAFF53ADD33F5AD0238B16B2BD4AA222D59E205F2DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812152, "uuid": "adbd0426-c29b-4470-8bd6-95fa03c8980c", "value": "3072:pJQwuHgVtdAV0Y8iNklwoCEN2Q6qf9fx4J8KvIlgaO6ltbMf:DQwuHgVtdAV0Y8CkDnOXKPCf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812152, "uuid": "533af2d5-53f3-47e0-85a5-b25d261d3093", "value": 147352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812152, "uuid": "b94345b5-f8c2-4ef4-bcb6-4cfab1bf9d96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e032adc9-e648-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812152, "uuid": "9fd63c0e-5aa7-42a1-b59c-9f5010d916d2", "comment": "Malware payload (Mirai)", "value": "f4f8cf0bbe7e85c310bf926471ad5843", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812152, "uuid": "b5d302c4-a6d1-4eb2-901d-e6c6e759a468", "comment": "Malware payload (Mirai)", "value": "7fedc8f52115affcc1857b23cd549a5c43010cd3fb222090b02bd6ca36b76760", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812152, "uuid": "2a3e8d80-e431-4361-85da-bee9715597b0", "value": "T189B3B087B1907ABEF4A49E3FC4135E26A6258F705583173D71BDF9906E3A3903292F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812152, "uuid": "d26a3200-6e62-421d-bdce-8159042ab3d4", "value": "1536:U1PcAphuU0WkdVYUqwaJ4XbvGBM9cQn4yaZeC7jHpdid880T15OxCZ+Pe8rSf:U5cUl0WYVTUIGBzQnq7I88HCZ9USf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812152, "uuid": "44622214-3456-40fe-9b2b-ba6030eefc27", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812152, "uuid": "ff2c7a84-fc64-4629-a491-545bc2624d08", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca948fe6-e642-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812211, "uuid": "466ba0d9-d1cd-465b-970d-d9c58d1e8678", "comment": "Malware payload (Mirai)", "value": "c8098edfd846fe12b681034d1620801c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812211, "uuid": "96afc46c-0c4c-4cf9-9fc6-17f84c1b7179", "comment": "Malware payload (Mirai)", "value": "0d955d7236cff85f358465dfc81ea0ef5a76037bd639022a776d286a9e548140", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812211, "uuid": "cf868d30-0b5f-402f-9a64-b627d96a031b", "value": "T1B17302B671B844F9C6809D7805CADBA909E5F27C63A0663B2597F0AB34F2F07535E0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812211, "uuid": "6407a338-e44b-4901-9c39-24e37e332245", "value": "1536:wjjsvnNYlOK2RuQgId/ETXxL88FoAnnVsiocPorf+:wjiNRVgOopXFoE6io6Sf+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812211, "uuid": "86b5d94a-9826-413f-8ab1-3aedb435ea5f", "value": 74692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812211, "uuid": "230b1f52-856b-4b1e-b6b9-e01abb09707d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1955b25-e642-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812211, "uuid": "52cf052c-f63d-4201-b013-b2d55ef0024a", "comment": "Malware payload (Mirai)", "value": "b7025ba351399fe692f91d106ba68b9f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812211, "uuid": "7817208a-7f85-4bea-a7fa-a2c6f92378ee", "comment": "Malware payload (Mirai)", "value": "5ede1d8505787057d2f6f156718c6cd052a161b6ddad2da43a480e35a8d66d41", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812211, "uuid": "4fa63442-cc2d-4171-9461-149865834a44", "value": "T17ED3C021E4005DD1EC2129F578BA96B80350EE700BDE55C3EFFDE95E647BD9438AD2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812211, "uuid": "a903a299-23d6-421f-b8ff-f82512b4b85a", "value": "3072:nri0425Ag6BmBFxVhEh0o+UjqGk/WAvtFB/xJ:nWt7mBFxnImr/WgtXj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812211, "uuid": "2945ad59-4ed4-4259-9df3-f5160cfedf05", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812211, "uuid": "5a98e75b-b14c-48a4-a2ea-dd09a697692e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f80eb2e1-e643-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812211, "uuid": "ef1eb04b-927e-415e-be51-15d161b4b431", "comment": "Malware payload (Mirai)", "value": "11c1d71923b97b42e179d8f7296a7c29", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812211, "uuid": "9a2c5df0-78ac-4a41-8d22-ba6e8bfc07e0", "comment": "Malware payload (Mirai)", "value": "3e3cedaa0edd27da41eab7bad22d40b1f046275da25bab8ed6ddef1408c900a8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812211, "uuid": "f287b8c8-85ff-4b0c-959c-5124c0d50525", "value": "T16C04392F358192F0F6411B746BCBD3976C390BBF5199A09F6B416329B6E0B7BA02C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812211, "uuid": "82f16b4f-c170-4ad8-8723-797ea8d894b8", "value": "3072:PmfxblJw5f+Nd/edcLQA78jW866gOVNLddnNgRdgJi55wmUX9:Pcz7zueQA6nDXNgEJi5azN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812211, "uuid": "325fd427-db18-40e1-b114-41259895f1ac", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812211, "uuid": "9cf295da-0897-47d2-9fce-248e3d51ca62", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9a02a8a-e644-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812211, "uuid": "3aee3f82-42e4-47da-89ed-c0b88c582890", "comment": "Malware payload (Mirai)", "value": "120f9eab351ae4d386bd7633c15e270a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812211, "uuid": "d829406e-ebb0-4a2d-ba11-8cf894b09d3c", "comment": "Malware payload (Mirai)", "value": "1bb03eff70e424ecd1ea9975e54682d32c891b2f2f9dda9c291d8dffc3480bf7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812211, "uuid": "f1097ff5-5bfc-4cad-8354-515f7e5ce3fb", "value": "T179146C2BB3C39CE6C51067308C316362776FD7081958EAFFDA0B3794A9977225A246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812211, "uuid": "9e798e35-aebc-44d9-a38e-f6eb71295e08", "value": "6144:VxJOm515o9RsmMsTzkl76Eth727IKTt9:Y9R68zcXn27I0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812211, "uuid": "cc7c2b4f-008c-4c86-b5c8-36828d3dc27f", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812211, "uuid": "78f61d47-706b-48d2-af33-804396d70810", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a687d7e7-e651-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772812276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812276, "uuid": "0bcbd8b4-01c0-4246-8a06-9f6bded404ea", "comment": "Malware payload (Mirai)", "value": "34e2e365a469cf9c85bcfb90a9cb3fc9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812276, "uuid": "85c39ff3-cdb2-4b69-917e-a3983c69a819", "comment": "Malware payload (Mirai)", "value": "829966e77d23abd834e23fa34f336ee41b35a298ae317b3031ff2cb64279d3b0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812276, "uuid": "3e0c3b5c-9b9e-4702-a6dd-cef7030cfa32", "value": "T134C3F195FB636991D0A342FDA4C00AC387A12E318BA217080699F774387DDFB1F69D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812276, "uuid": "3603ac2b-5944-4a57-a67e-d48859fb1438", "value": "3072:nBxVvK+++pnxj7xdRaUX4Sg4e0eEvm7EG16MMTn8:PV7VFVX494e07GsxTn8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772812276, "uuid": "f2b2ddcd-6429-4c87-a332-921314142fbc", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812276, "uuid": "a9f12da6-9398-4d30-b9dd-5b0393c7a65b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb7ca078-1977-11f1-8a4c-82aee05be84a", "comment": "Malware payload (SalatStealer)", "timestamp": 1772813826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772813826, "uuid": "a324d1c1-1f0d-45f8-a030-95f08014db21", "comment": "Malware payload (SalatStealer)", "value": "f00792d02ceb7b4829ff39f833f2bbd5", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772813826, "uuid": "697209b8-4119-43cb-b572-7da1a035e268", "comment": "Malware payload (SalatStealer)", "value": "9c03d2476f5d46c9a49eb40c5a744ebba7ca8d4036924e426e652627568f87d0", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772813826, "uuid": "5f76aabd-c678-4c1d-9fc9-a2a487dbc7b8", "value": "T147062388F9832AFAC57765B508EFF37A86341D090416CDFBCFD98E55B76AB1009187", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772813826, "uuid": "9fcb5067-b2b0-4aa0-b61d-b8acc240b211", "value": "4794687cac0beee76bb775325b829d22", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772813826, "uuid": "90a5231a-b91f-49b4-a27b-311719cc67a2", "value": "49152:O4Rq9CH4M1zgaatvULCrE9a9RSyVxtKGIcj0s/WSoavxOW2AEcwrvZRd33Q1sC:8GhgaaOj9ErVxtHIcjjZoAfw9RdnQf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772813826, "uuid": "c994c826-6ea3-4daf-8bca-dda1836fd992", "value": 3686912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772813826, "uuid": "5c0fa01b-770a-4dba-811f-bf41b73d6caa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "524ac47c-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814858, "uuid": "bafd6326-3700-4ea7-a36a-99ad444495c4", "comment": "Malware payload (Mirai)", "value": "45609dff74b0ef26b64d3ea9480b4f6d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814858, "uuid": "a6838e7b-1028-4d4f-8468-31f864cebba8", "comment": "Malware payload (Mirai)", "value": "8c67a60301ec32183b034f2da1f6e2cb837c91c9222124cf8d99c2bd49873a8d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814858, "uuid": "c647bd2d-654b-4084-a29b-915134591bc7", "value": "T1BD12BAB3F5F2BEB03C4950195A865E82E4492D3D0E687D427443BD1C717CAB8E1B5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814858, "uuid": "effa8d4f-13d0-4a62-aeab-40827d01f9c6", "value": "192:oNOJ++FWXymrmECHxdm3wgYqIlPotECoY+rvJ29e:osJ++FWXymriHxdL+2F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814858, "uuid": "50c91b8e-e105-4ff5-a8cf-607914a4332c", "value": 9612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814858, "uuid": "467b7bc3-8cb3-4b57-ab5a-1fe8b9a1b42d", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73e31b8b-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814914, "uuid": "d48effe8-1d7e-48d5-b39a-fe64b5670729", "comment": "Malware payload (Mirai)", "value": "7d27186c1db01bbea30510cfc277e4c2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814914, "uuid": "822d18bd-d5b5-4c44-ab75-23158ad2d25e", "comment": "Malware payload (Mirai)", "value": "42c15fb2b72d2f7d997fb4b7a0c82c06bad2704c6caf10cae06a713bb87b3dd8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814914, "uuid": "6f8bc974-3589-47a3-b9d1-9711b43b0d2b", "value": "T1F104975E6E228F7DF668873047B78D25A76833D627E1D644D2ACC1106F2029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814914, "uuid": "411a81ea-d6c5-4837-bbaf-7f4adae2f86a", "value": "3072:5AV0vz6qOWKZO4idT4SS5q6xfnmBYgZMD1y:qVIeXY4IeqAn4YgZH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814914, "uuid": "991e61c3-4d6f-4529-89e7-e9d5c7fb6099", "value": 177772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814914, "uuid": "a5ac011c-52dc-4441-84b3-658c61d1c2dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73ee2f44-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814914, "uuid": "42f72fcc-448f-4074-89d2-ff0ee2291960", "comment": "Malware payload (Mirai)", "value": "384f0e026aa078dea81ac46d0d65101d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814914, "uuid": "b3eb8ab4-040f-45f8-9c51-06caf0a569df", "comment": "Malware payload (Mirai)", "value": "c7db460d143b5f0af28e84506455d30753fcd0c28f59d54c49c68a2f9e54b4dc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814914, "uuid": "21dbdd29-7ba4-482e-a563-794e8ab4a5ba", "value": "T13EC3F909AB614FFBE86FCD3746E90B0525CC551722A83F7A3574D828F64B54B4AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814914, "uuid": "f6efed4d-4c49-44e0-ada1-fcb7807dc01c", "value": "1536:htJ6cGVoxBFf+g6z3jLH514RX07P+Y0+YdW0OKh+6gposmZ5uBrKnrAEFjYVi0h/:TJ6cGVoJ6Tn4Y6g7mCpZEiV+0d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814914, "uuid": "84d50d66-fd3f-4f9b-96c7-cb2928b37402", "value": 122496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814914, "uuid": "332b9f71-5e2c-441c-a552-59756bd87b78", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc809467-17a1-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814926, "uuid": "06aecac1-402b-4c19-8826-40e599aa4c1c", "comment": "Malware payload (Mirai)", "value": "73fc43312ab6efde728198d1d4b4d749", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814926, "uuid": "0c85e5b5-3f3c-4f8b-97ad-495f41cb906e", "comment": "Malware payload (Mirai)", "value": "c726e56fcb2693456279ba27fe9267832d65d39e656e681190833f01e7dca83c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814926, "uuid": "15c87d23-723d-40ed-99b7-b6423541ed7a", "value": "T1DD831A82BC818D11C5C813B5BA2E118E331623A9F2DFB257DE115F2477CA92F0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814926, "uuid": "4ee11892-8848-41fe-b1a0-868af983ce57", "value": "1536:vinJr73EnAYAnM09ltVTnjSUh9odbviFts3XRazJI2i6tBsT0NseFDF:0rYZAnNv/TnjDh6NKLPtBsT02e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814926, "uuid": "01dd5965-55cf-4ca9-88cc-c79f172f09e6", "value": 84232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814926, "uuid": "915e774d-8369-460e-aff9-af23e11760a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c5f7a91-17a7-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814926, "uuid": "c36095f8-a25d-4fe6-b882-d17c26a54ceb", "comment": "Malware payload (Mirai)", "value": "7a42f06baa8fda7f26e91b2240183484", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814926, "uuid": "47c81d09-c2a3-40ce-860c-74d00ed39e3a", "comment": "Malware payload (Mirai)", "value": "9c42c8d446d50efbf0c526a56ee5c55cccac24885c030bf5c1110fada30cd7fe", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814926, "uuid": "d4b4dcb2-0857-4236-bb7b-304e170455b7", "value": "T145737C21AC792E12C0D4D6BE12B78765B1F6234F24A4CA6D7E310F8EFF505E4A6172", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814926, "uuid": "335abdc3-82fa-47d8-9599-8a7d53f0ff3b", "value": "1536:6f4Vjq873S3JiIzF6K5rRGgWu4naLZAiDHg:MIWshMGVyZQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814926, "uuid": "20494ec6-b867-4d51-be46-e3cf14e64c1c", "value": 76960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814926, "uuid": "98067b35-8bfd-46e3-8dce-294690340628", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef4c53de-179e-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814926, "uuid": "2781209a-fce5-454c-9c19-8f3f228a4585", "comment": "Malware payload (Mirai)", "value": "acfda8b7b77f47892f8750f76d4ea79f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814926, "uuid": "23d2d55d-a5b9-4f75-b423-351c2e9ab734", "comment": "Malware payload (Mirai)", "value": "a9df931f5322690419c8a1e01007f64b42258283a64757fb2023590ee517c27b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814926, "uuid": "cd913fb2-83a1-47c8-b416-5b71868b579f", "value": "T139539F73D0A9ACA0C04445B56568CDB00BA39804B6A77EB65982CE358007FFCF61A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814926, "uuid": "86c330ba-8d62-4965-b6bc-022fb85085b4", "value": "768:V/+eIMbW9aClgb9WleEPn2uKg16N2DzKWQpxHBFqM8eEfzRfloViu2DCi0DF:V/H5C9aC70MKWQriRqVKDCi0DF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814926, "uuid": "6fb42a13-3611-4e33-98d8-e04dade3fbce", "value": 66552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814926, "uuid": "98a92271-88fc-452b-ba33-f6f8489da932", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b4fcc37-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "a4344f28-aefc-494f-ab59-d7d81f9ea805", "comment": "Malware payload (Mirai)", "value": "906fd91a78b299b20babe66a0a381e77", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "1589a1e4-e5ba-469e-a392-1db40905a022", "comment": "Malware payload (Mirai)", "value": "eba4cfa1129e43c6683d047b3c2644f0286bb564e3b2ab3d00d05ec72ec157e6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "be417395-b276-4a7f-93d1-fb4fc1bec161", "value": "T125433C96FC9245A9C7C117BA771A978A336263A9C2CF7313DC080B5136C9A4F4E77B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "b17fa5c7-5894-412a-8fd8-3935e9e6160d", "value": "768:8jRWcVgYik7nshvFUhhyE8dGLf/qkZzlQrdJKrn4vbk9Mz2F30ntzg7:kRBVgYik+veKDk7qU5QrdJKrJ9cOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "61214615-ecfb-4342-8d89-320a5d201629", "value": 55324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "83e6ab5c-27f2-41ea-9cc0-3c841a68ab56", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3b650f7-17a6-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "4b0db5af-b977-4e50-974d-b7bdf070fbc3", "comment": "Malware payload (Mirai)", "value": "d9e5f4f4de71e3ef5a0dd3ffae020a0f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "79269e32-a7c2-440c-8d6a-396ac8eee205", "comment": "Malware payload (Mirai)", "value": "2581dc4fa78b2561596d4cbe7e62c0fa3f8881c2af5b5ff14a77f80334b69173", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "00f826b7-2945-43e6-94e2-7ef8773b17fc", "value": "T17A532943BC91991AD6C013B9BAAE60DE332173DDE1DE720BDC109B543ACA91F0D7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "02584e21-182d-4bc8-a16e-eec1bee27413", "value": "1536:ortMf0p751vcX5R+pdrT5MqR69HFYyeX+yg4TFtmBDF:or80p74aG79HFXeXMqX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "75e086dc-46f9-4c4d-aa2a-ecf3020b6a48", "value": 65316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "c45c44e5-7373-4733-b390-dfa8a494b743", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88ebec33-17a4-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "5c76744f-dc4e-4d26-ac6a-bfd4d6152cf8", "comment": "Malware payload (Mirai)", "value": "c1f915184f38ad7f5a67a4be1fea85fb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "0c671271-b050-4c61-a3c2-597a992cb0e9", "comment": "Malware payload (Mirai)", "value": "d07b76ec268a4cebf4718c40037a6a855dd75385e6841e5788f899cedcb1d4d1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "acb168b7-d1e0-40cf-9135-0ef60807c85e", "value": "T140633B0237684E03C1A659F9292F23D083FFEE9121F4F5842A0FDA5A8275E37555AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "4b4725bb-df01-422c-8dea-b23e6aa6f7cf", "value": "768:kOwkQx3TMR28v4Ru+RqD6wTRAbaAdQAiYfu9B+9jXRMxeB2TK/4fo2ql+Y2AH5Yw:GZM4NJKLBAixOKiUKQfj+H5YLd6DFX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "604757d8-d500-4aa2-8d7a-47e6e655dd5b", "value": 70752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "8a878f8a-996a-4aaf-afb1-a673a434c842", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b70d69f-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "12151db0-caba-4edb-b199-f1722aef0180", "comment": "Malware payload (Mirai)", "value": "6b24e887dd44f4351363f9c836723e95", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "e44fd499-0696-4de2-973a-7ef137d986db", "comment": "Malware payload (Mirai)", "value": "e829080dd50edae18396db24a6637d4babb8f5849a043f017ef12ee3a725b644", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "fd4335d2-3571-49db-909c-66f42516ab83", "value": "T1C5C3D74E6F218F7DF768873047B38B21A75933D626E1D685E2ACD6045F6034E241FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "e38237d5-e60a-4220-962a-d8a7685be3c5", "value": "1536:I8cT1Lkgwe4eSZjkap6Ijj/Cr0ubgpa5zD49LHR88HFveK7HG9tp0SN:I31LPwvJkCPe949LHJHF89AE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "8a03b652-93ee-4671-9e2a-a6873e5a61d3", "value": 118400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "2851a4f6-9497-44fd-95a7-1d29d08c0f52", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00f07073-17a3-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "88097f47-4c6e-4465-91ec-ef6627d3e676", "comment": "Malware payload (Mirai)", "value": "5fca2ee0e1210dc42996b2826e94dc1f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "215bf856-65f2-425b-ae23-251f35b75f93", "comment": "Malware payload (Mirai)", "value": "f89d25a12a3642fc6493fdb10967afb4d7ff12dcec9ddd4b5c4343e03aed97c1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "db9ab228-b470-475e-a951-9dc1a83f5634", "value": "T1A2534BC9A593E8F5EC090A712173FF758576F23F216DEC87E3A499A2AC42103D1162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "3c956662-1b7d-4f07-bf44-ca0203989811", "value": "1536:dnA1GL2BeQAvXLfmYM0GTm4JnSzKY/0HckpTiCicD2gt:y1GKBefz+70G64J4KY/JSN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "30b34ce8-450c-422b-87f6-30f129090b24", "value": 66608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "50da6a2d-af43-4ad1-ada2-a1152a23352b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b87106f-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "af6efcc2-f996-46a1-ad28-7aef0e20e6d8", "comment": "Malware payload (Mirai)", "value": "95d4d703a16259ce649d81ab8e1927ef", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "745daf9a-643a-4676-9257-ac9faacee99e", "comment": "Malware payload (Mirai)", "value": "113aeed282f4fa932881f140e0569e6795f5a42409e2ae90d865d2008cd9d2d8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "7da67070-71e1-427c-b929-2deac79d6076", "value": "T10C935C02B70C0E43D1675DF02A3F27D1D3EEA5E021F4FA88691F9A8591B2E325586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "28a696d7-6b17-4d55-8a8e-3f50b15b7777", "value": "1536:pcBZli/TwLrLnyUiQI0tdpDjnPqGD0M39+7BAnKEAilKmMGXyCPTEA2lfBUB:2Li/T+xPbTMAn66MNCNlB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "df37cc93-2a9c-442d-8690-ab1b89214740", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "30c41a88-c81c-4cde-8fcc-23ff6d0a888c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22c89258-179f-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "d8b4e48c-d84c-4301-bcaa-f04afb7b6f9d", "comment": "Malware payload (Mirai)", "value": "01a07201f7c203bfb6bb78724a18c065", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "f96648b0-af70-4dad-9716-5cb5298cbb1a", "comment": "Malware payload (Mirai)", "value": "5eba349021e95339d69fc905707f5be3b7876fb5f74bec0a65bb520f52ebf0f6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "9483c757-6be9-4606-8cb2-bb7c1e775b77", "value": "T162736C86E757D9F0DD060AF0217FFB36D93698363224DEA7E7C4F857ACA254290122", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "1563f4c0-158c-440f-8a1e-d3b82b2cd9d8", "value": "1536:x3eUfjQijuY1feW/yE8DidLHSKKfnaQ8D2gt7:x3xj9TeBuLytfB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "672791e3-9a06-414f-95af-e77fed6ef446", "value": 74716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "acebd020-c1f8-4c06-97f4-7902cf7a070b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b8ab37d-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "85f99d06-d095-43ba-b4fb-0b2cda884d1f", "comment": "Malware payload (Mirai)", "value": "9af3b8bbc46cd72743ee499ef20e348b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "e4494e16-dc0e-4f16-a4b4-d97249bb0d9a", "comment": "Malware payload (Mirai)", "value": "1bcea661a5636b818c2eb6a8ab8fe85a0cf449f85d850b1019695abad595c390", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "0b96fcaa-f2c1-4f6f-a34e-c63cc408dc12", "value": "T122332912997C1A2BC4D4A77710A38363F2F62B954194EA4FBD710D4FEE983501ABB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "9f39b0f9-fadf-4188-a027-d08bf443c2f1", "value": "1536:4b34LHJRwGYtJLx1TBH4EmgSXUwdyq2NS:4LaQqUy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "ba6888e3-8e46-4433-8b0f-8a7e9c446e5a", "value": 53812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "c1f5831c-abaf-491c-a924-243d7eff6c4f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b933edf-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "3021ae3b-56ac-4ad0-b194-4cd55c91dcaa", "comment": "Malware payload (Mirai)", "value": "688855d0f65db6456a62a9fa3d2c11e7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "1dda26bd-da09-4d99-a5c6-3ffe4ac1f97a", "comment": "Malware payload (Mirai)", "value": "d10173050b1d9e93e455c599af58d97e15cefdda008ce7ce00b10d1288721e8f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "0479d705-b6c0-4f11-babe-0504bc588d63", "value": "T1ADA348D7B401CDBDF84ACB7B4453590AB530E3620A831F36636BB967EC361981927F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "1bc0c3ca-5654-445c-ab77-e87ddbf935be", "value": "1536:ZuBzQ1QMflgBWwlxnA1W8qHW4nkVds6a8n3+HLKaWJ3gGVl6KzLItGe4FsIfSn:ZuegswDnA11L+kVds62w3gglZK4FsIKn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "5c6ba5e8-4ad4-463b-a34d-735e61028cc0", "value": 99840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "0c3ff900-5d58-4ad8-8ade-064ccda16acb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b965f96-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "21a9ab29-ccbd-4e61-a42f-8356199d0b52", "comment": "Malware payload (Mirai)", "value": "6c41031ef5b1beb8fbaddcb358867cdb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "aaf2b783-c90b-4d9d-a9bf-3446c99e651f", "comment": "Malware payload (Mirai)", "value": "bb681a4e9261dd57a0b6239202d0f2d9312ce98ad4b68032fe642c4f22d27e98", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "17f2a192-7119-42cc-8118-224fea6ed6e3", "value": "T1A1934A52FD818666C6C126B7FB5E028D372613A9E2EE3203ED256F2133C795B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "9f421df8-1938-4b11-8301-60969b3f2b8d", "value": "1536:Kd86Y6RpPoaJstYVlWtk6ItV2SCq79gwFJwS5sJzGeJCQsnUXjQ:Kd86YGpPoaheS2loeYwSLCCQs5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "4489295d-d7fc-4725-a581-e74db2f1c54c", "value": 89832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "26b4d074-2179-4699-bdc8-5981717c6ce5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b99e6d3-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "2b344115-dfb4-46a5-9252-0f3ba5c91aa1", "comment": "Malware payload (Mirai)", "value": "57571ccece550d7208d5792d8adef874", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "5c1433db-5bd2-41d7-8b35-2b207b5f98e2", "comment": "Malware payload (Mirai)", "value": "1fc349afacada277ac57b86a84a0cf3f9abab538bb3d7094bc7b6322530fdedc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "2ca25044-005e-4aa8-b93c-b19fb95d8f9c", "value": "T105116DA86320C31278A2463964E12BC993CA6FF7A484CEC8B131CF15C14559C3EE5B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "603e8f38-cac7-459b-ad81-aa5d48257872", "value": "24:+HwhHw0e7HTHGRB7HmHtq7HvHaX7HBjHBWBTJ17HwcHUV5:+HwhHw0EHTHGvHmHtwHvHaLHBjHBWBFM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "bc6f43ec-c1ab-4e90-9e6a-cfccbafe8189", "value": 1026, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "02d0a3e2-b95b-419e-be09-30c00376ed8a", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ba1e9a3-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "b2a00bae-32d4-4ed4-9965-09c3135b9f14", "comment": "Malware payload (Mirai)", "value": "120cef502371f455f89170fad1598574", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "f67f2399-04a7-412d-ad7d-e61b1c73d6ce", "comment": "Malware payload (Mirai)", "value": "fffc0aa05ef975cbf0ce936aff9da63fc3ac05fef7f0260306011338f09d09b1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "d9a07da2-f8fb-4949-bb85-2b54eca3708a", "value": "T1BC933952FD814622C6D116B7FB5E028E372713A9E2EE7203AC155F2137C795B0EBB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "b399e35a-fdda-418f-982e-70f148e6e2cf", "value": "1536:rFwsDRxijJ+CVvEwEUojsAA1L9gBhZ30wK6/r1oPD7vj+ZPJ:rFwY8jJ+YWsAAFOvZ3fpYGPJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "721338af-e0f6-4ac8-861d-111bd6731c17", "value": 93344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "2079f15f-dc06-4153-845f-dd0526c7543c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ba86511-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "b8369f4b-b857-44f7-95d4-8914da76767d", "comment": "Malware payload (Mirai)", "value": "6101d57c130210f0e31947a4e502a515", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "9487bed7-abd9-4bb9-a09b-f514afce9b00", "comment": "Malware payload (Mirai)", "value": "cafd2e423cd6f049c2ac3e3c4e7c96c14f08f7651c032d7e90a4d7456a635f5a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "c679b5c8-2b78-4adf-adf4-99180bc144cc", "value": "T1BAE33BD7F900DEFAF80AE73B48570806B530BBD105925B372257797BEC3A1991863E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "398a61da-74df-4035-8de5-3f37d50fa484", "value": "3072:TdLgwopU2wZAWnQwCCVCjda4Z/dzokG7KVvjbiKLrekFGyQcMNS:T9Mjda4hdLG7YLOyQxNS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "21508c3d-30e8-43cc-b111-ffbef60f5cc2", "value": 152288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "5294a996-8109-4580-b706-9de6a43286c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7baa1108-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "809decbd-fd9a-4e0f-ac42-7ef3613d014e", "comment": "Malware payload (Mirai)", "value": "32ca4e76ab8c3f9f0096b40d3bbbe6e5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "b8da17e4-2c14-428f-991e-0f4c8cf58363", "comment": "Malware payload (Mirai)", "value": "078cf00268c2def420f07a3625d1f191f7a97f57b68af6fa590ef12f78365b53", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "531245ff-1f5e-4b78-b901-e19a56c25a06", "value": "T1B5D30945F8404B27CAD612BBFB5E428D7B2A17E8D3EF720399216F20378795B0E365", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "3758957f-6c4c-419b-8733-9f36b5e0920d", "value": "1536:zNLAVG5wSCgkC8lgBm7XWeA0Zm4VEdTJTMj04WO3Iv4crxqRd+R2lD6wywHRP1D0:zNUyeC0TzWew4kJ804WqIrFmogzJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "29c9c36c-84ca-4739-830e-5e67412109ad", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "c0938e01-2337-4568-affd-59d0c002f12e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7baaebb3-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "31e068f2-2c79-400c-9e27-14e7715594b8", "comment": "Malware payload (Mirai)", "value": "46df6c34e1abbd693aef6e0439ead502", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "651f59d4-b723-46cb-957d-d767b2d34d4d", "comment": "Malware payload (Mirai)", "value": "04457096271432b6c1253bcd11e02fabf97b303f579c299e01d2ef9d9db3520f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "758b2452-626a-428a-903c-2480fd58dae5", "value": "T139837CC6FB43C4F4E8120A712177E7318A73E53D502AEE83D769A872BD12641E75A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "2ce29ffd-b9e9-4a5d-b03b-f4dfb7b8b652", "value": "1536:4NGfle9cPS4HSY6iAXVE143RrFUCeWtsrswWdZc:4cEWS6SY6iA6143RhUCeAszt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "d4f61d03-ecc9-4a00-ab46-d2cd14aede7d", "value": 83600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "1471ee75-71bc-44b7-87aa-1a385d1734a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bac0f4d-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "b6287673-0d35-4b4b-a9ab-394c68974493", "comment": "Malware payload (Mirai)", "value": "2c83476e22e78b4f30e00acbf95adaca", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "2fe88ccb-c431-4a78-b2db-b35a5fc9cf4b", "comment": "Malware payload (Mirai)", "value": "fe2d31d8e9db5624dd994fb7ccda1e044f6b8645ff7b4106b56f1ca1ac64dae0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "0b74e2a4-896e-4e0a-b084-375bf8322f3c", "value": "T171936C42B70C0B43E0575DF02A3F57E1C3AA66A120F8FA89790EDB4596B2E325547E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "741cb62a-0e28-4c2f-a9c8-3ddd87b24be0", "value": "1536:6hSlTzh8nutu2NMq1B+z6Xls0kyb6X6TX+jWMuo1biIiGMX0l1WrVlPfAOFEB:LKa1BHTXGWeiGMKWrDcB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "28328bbc-86ff-466c-819c-031324af23fc", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "a0fa836d-6c1f-4327-89fd-ed1ee3370269", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bac9648-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "e2115ea9-e38e-46bf-815d-f506eafcff7e", "comment": "Malware payload (Mirai)", "value": "2d0d0c9dd8f41f42329d525b05c29226", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "c3d4ef59-e08c-4a53-8650-ec90a666edb3", "comment": "Malware payload (Mirai)", "value": "28768fed528dab06fb800aaf02e62f519a88614004952e170b2de858b0d06e92", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "19b4ec41-886f-4f7b-b0aa-fe903e9cc8a5", "value": "T18DC3ADC3FA8714A1C46206F007C71BAD6F93A221CE5FE4E7AC1DB63B5A7A4DB15163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "91896527-268f-42a2-bfd2-14515d84597a", "value": "1536:CrMjtT/2h9gC/LjVCnXEglWuoPJEjuAclMkWFcpxs59NgRCEF/LW9:CrWT/i94XEKn+SuAcFWFcMgbq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "a132fcfe-87e7-4c4a-b4c2-b0193b5f78a7", "value": 124676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "2c216d6d-a793-40fb-a192-0460b909a022", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bada30b-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "90ed988d-d33e-41e6-9bcb-7e938aa9db64", "comment": "Malware payload (Mirai)", "value": "828d9abf27c1a91cab5ba7e35b23fb75", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "c8c7c174-3030-4a05-80f6-d008ee283c8a", "comment": "Malware payload (Mirai)", "value": "aadff1cd1e8f5414201101ebdd063fcb4d2957cf9330ad5469b066d6cc264066", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "3be3d325-539a-4c9b-ac39-130d3d4caea2", "value": "T11F838B23C93A1DA8D84805B0B0B48F755B63E515C4672EFB599AC63AD483EDCF2863", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "c079e83b-fecb-4c8c-9075-9fbd1b274b20", "value": "1536:qxD+xE86+GValyEKhboKZvqbd+/RCaWZNS8Hyu:ql+xsV8Y1PZ6+/Rw4S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "6f94a431-f842-487e-b4bf-9c30dbd5b613", "value": 83812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "c28dadb0-cb5e-4837-aea1-aea68bcfb5f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bb0017b-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "6cb73337-669d-4e16-859b-7f25dadd34cd", "comment": "Malware payload (Mirai)", "value": "b469fc787accff44b058a90cbf69fe51", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "c1e6b28d-0543-470f-be24-eef47c52e479", "comment": "Malware payload (Mirai)", "value": "5aaf6f8c6459aecb6ec08b8e88e0f7f143dcff69e200e71b58e18e0535c77307", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "6a039dae-687f-4350-a309-30f05ea26f54", "value": "T1D8D32A05B30C0A47D1A32EB43A3F67E193EF9AC121E4F644255F9B8AA1B1D335586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "6464fbc9-7939-470d-a854-410d1bc42dc1", "value": "1536:FetnOCu/HhjAgESKxfitGtegk2eZ/wTLlYkJvAxhv7suWvnqvcOWvD:XpBjHESKxNtyjwPlWx/gD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "5052577c-895b-4638-bacc-037e61e4c3e8", "value": 138132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "656de1d7-9def-4a67-8be1-e61c3ce79b66", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bb02d66-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "72b8a754-3971-44eb-a4ab-9f6e489e0e76", "comment": "Malware payload (Mirai)", "value": "6b2834d0305231fcae44dce99daf8159", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "75440040-95a4-42c4-8463-61c49b9847e7", "comment": "Malware payload (Mirai)", "value": "fd64ac296d61656e43e0d2ff8c012779b1ec8615fb63af2fa8f952d6cbad9c70", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "8785cdf5-0739-44de-8dd4-5665638b93d0", "value": "T1E2935B13B9C480FCC889C13087AFB536D963F17E1279B25B73D4EA167E8DE511A6E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "fabaeb47-0c8a-4a0c-8d90-09bc83ffb098", "value": "1536:bai2ZdojAKS6eTMxMQQ+jcW4yxAw/1h1ss6fuftHnRlGJHaBs:bjTjAKeTMxhjyyx91h1ss6feHnvGQ2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "047c840c-9a01-4169-8b07-35083f7cda4e", "value": 88928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "7854f17e-98d2-4af9-ace4-1ad32d28ea48", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bb0978f-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "1977a42e-3ed9-4afb-ba0d-2d5ca697aa47", "comment": "Malware payload (Mirai)", "value": "57a5a0a348debd5d17e4fb35e71f6bfb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "92cfd7e0-1a02-4a58-b873-2b8b757229f0", "comment": "Malware payload (Mirai)", "value": "6f0ca1a298424961cca17b6052e52e935c95529049c69410f0478cd02ba6fb67", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "a81c452b-2d72-4301-809a-157fd1b9e316", "value": "T10E8328C1BA4BC0F5D90748304067F33FCB32D6394061D66EEFAADE65EA7364252262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "f7f38861-1aa3-421e-84f1-6631178befeb", "value": "1536:8l8IhK59kLMSbBv7zTWAcanWC8f4TxdgoXF6hK8l9:8/hU9ktbhTWnfgTxddXml9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "dc9f5045-5c65-4c69-a1e3-0f0bdab76935", "value": 87696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "0abae5a3-4a07-4b0a-95fd-44264c177364", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bbb194f-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "b48a27d5-3850-4c8f-b4fb-61d0b5a41eff", "comment": "Malware payload (Mirai)", "value": "fabae4c565f3ad1c3335df9a17b42b56", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "714a2dc2-1cce-45ad-847a-989b6fdb0b00", "comment": "Malware payload (Mirai)", "value": "b33bb5abe865f0d0ef3667186db0b6f93bb84f449e2edd32bfb4c77b601dfd3b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "e9dce0df-de26-41fc-a2bc-3953baafdfd2", "value": "T1C9937C85FB83E1F4D94609B011ABF7798A31DD322024DD6BEB98FE72BC21612911A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "5fedf02f-7bc2-4274-8354-6cefe51a9cb3", "value": "1536:hqj89KwF8ROXbDdcj04/xHj82iRqo6ppUQ31QUHLKVyMyFwr:64F8ROLxcj04/xHY1suiE5yu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "5dcbdc4d-d80d-4ef3-bdce-80feca1972d2", "value": 95476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "a5f60166-83c1-45e0-9432-ad8d2c09a2a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bbc9168-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "fce20722-288c-4caf-b1df-955084cdc762", "comment": "Malware payload (Mirai)", "value": "ea9902e016999ffbf4b4bba5513b0b0b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "cc43cd85-a440-4e22-b8ef-d3127ee2ae76", "comment": "Malware payload (Mirai)", "value": "0474b0ce5ba46379553327c202548576b2b3f69d63cd9111e41a5c0fe12f7f0b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "6a6be356-6074-4fb0-801d-0f7eaa0acfb6", "value": "T1FFD34A07B5C180FDC4DAC1744F9BF53AED32B1A91239B16B2BD4AB221E89E315F1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "de4193c8-ecc6-48bb-80d6-b704ef26937c", "value": "3072:SxhiZfgBgmcGKAXvypbS2rrE+lxV7BMgQyF5iMUeZGXx:SxhiZfgBgmcGKAtReFUfx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "399e9aa6-f59f-4de9-9b26-a5b2f4f76d8b", "value": 141784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "4b1c5a99-4dd0-47fc-b153-031a2e250ec2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "749e75de-17a4-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "9a867dc2-6192-4bbe-96fe-4f84ee5a8928", "comment": "Malware payload (Mirai)", "value": "190ffb5a95426e41406cf7408012ba3a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "1e7615f8-0b6d-43fc-aa6f-e1442f1e3133", "comment": "Malware payload (Mirai)", "value": "f8eea1f5af1af4eb4f5c9ce1f38d65a99ecb1ab5915b7f9cc1c53f290d4b3e79", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "9a787529-4cc8-45c3-9a88-db24680f3d05", "value": "T1D2734B86F98B84FAC51B8C3051B7F13FCA30D87E417196AEEF596E35CB3790292161", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "031395d8-443e-43c3-a1d8-f345446189e1", "value": "1536:WNQh18AdIiZk/eLy2lHQjb4cM/NxLcs8lGJhD2gtk:WNJACiZk2LBl3cMlxAs8o8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "64be7dcc-5693-43b3-9a07-9e1b36e13fdb", "value": 74672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "257d04fc-b0e5-4a63-8d7b-99e99ad60137", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d76130d3-17a9-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "e6c746cc-b572-4baa-9aca-c59d8519b230", "comment": "Malware payload (Mirai)", "value": "6ad01fadf2a50f5a78b1c0964e4bccc5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "2955e42e-49ba-43b4-a5ee-c8a7bd340132", "comment": "Malware payload (Mirai)", "value": "5a883f181447faaf82ebfcbfd91e49a979e3e6db9c41e954f9af79f5a1b691f5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "fc318800-900a-4d93-b001-e9671249e25b", "value": "T104731843FC81D906C7D013B6BA6E61CE33116399E2DE7207AD216F6436CA91F0E7B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "ea327a18-7262-4417-8bdd-4ba834697fd8", "value": "1536:n2j/RjASjzCTuaIGZ9FTU5yjL+5DmFBM2Irzy2+469b4MjWDF:n2tFjvM9tUSymFm2IL+zZZj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "0006ee55-0582-4402-b8b2-a241b63c63c0", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "68c4454c-15da-41e5-b7a9-6a48132c6494", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4c17231-17a2-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772814927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "e33067f5-9869-456a-a6ac-f88d06c3b5c3", "comment": "Malware payload (Mirai)", "value": "af267033c0414eecc7b8d63a5fad1e9e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "cb8c2b1f-91db-4050-be8a-12ca6ef5dc85", "comment": "Malware payload (Mirai)", "value": "755d0635bb1effdf27f5f828ccdae96ffbe1bef6839f445168ec3611e65c77b9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "a3a9d2fa-abeb-45fe-8d5a-bdecd0494577", "value": "T176631843BD4184EDC149D138537F763AC56635BE1239B1EB37E4FE2B6C06E600A2D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "0082036f-1ae2-4841-b9ed-bdd981d1e218", "value": "1536:RyS8pYi9mY72mIoLYKblpico7/qdnLDdd75DGA9:0WAmYamIoLYKehqdvdd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772814927, "uuid": "30aae552-7885-43f8-b448-2e0e6d84c388", "value": 72576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814927, "uuid": "05b7070f-ee8a-4e6d-ab9a-99d26b4d57bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dea27195-1981-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818100, "uuid": "cc3fc60d-f9b4-425c-809d-ac52e5c18ce4", "comment": "Malware payload (Mirai)", "value": "fd418cf0c00857ddccea1713e31256ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818100, "uuid": "edc98829-29fa-4349-9163-712fb0f00d63", "comment": "Malware payload (Mirai)", "value": "01254fb72eba1a001cff23fe94a1d93918d8668d2f0fdc68e13473f5b150bfc1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818100, "uuid": "70ee39d8-7753-4743-8fc6-7f4e69e82955", "value": "T10EE35D8AF4029E7DFD4FE5BE44670E09E931A39131831B2A53DBFDA3A9311990D17E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818100, "uuid": "0f4e9568-ce07-4b1d-b652-affc91e0866b", "value": "3072:noDlIyA+oy+ZGiTgnlXkgt7ZLgLq2e9FdlJcNNg:RDy+ZG2g7l2e9rcNNg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818100, "uuid": "4100b6fd-bf45-4039-a840-e2fa9e6c9d19", "value": 147336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818100, "uuid": "f8e01da8-70db-4e2c-b2fc-221d865b24c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dea730a9-1981-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818100, "uuid": "5ba45e2a-9389-4201-9931-41e7c71db210", "comment": "Malware payload (Mirai)", "value": "ef497a6307b32abc1c506abb4dfef587", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818100, "uuid": "7e862297-399f-46cb-8863-22a774081aa3", "comment": "Malware payload (Mirai)", "value": "fae2af91bb541a192db75cd9eba0540552386c3a77064647f6ad1c12e294d0e6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818100, "uuid": "1bd326dd-6352-4175-9cea-f14d2c9e873a", "value": "T162D33A2275791E2BC4E0A87E22F74761F1F157DA25A8C90E7EB20D4FFF212206517A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818100, "uuid": "a628904f-bbf3-4b5a-8dd2-c382f514fd7f", "value": "3072:nZUlV+Fawd99IVWFjKc7RgyWOFe30Hi09lshKwTh:ZUH+FD99IVWFteOgEmhPTh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818100, "uuid": "3973c61f-d14e-4e96-bd8e-eaf3136c52fa", "value": 140776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818100, "uuid": "f9c8a5d5-b12e-48a2-af71-aa53de1c0999", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dea74fec-1981-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818100, "uuid": "adeb9f72-62a4-41f1-821b-9b1041268d98", "comment": "Malware payload (Mirai)", "value": "cebc862c8b21de091c79c37a60183f09", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818100, "uuid": "ca0f2dda-7934-46da-9018-3b628611f867", "comment": "Malware payload (Mirai)", "value": "659fc80e372398501e9875260e870e8394c61546d5842fa15a3ca2a36141125e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818100, "uuid": "d4495bce-02f2-4fa0-b526-baaeab1062df", "value": "T164344B45FA418A13C4D117BAF9AF414A3332A795D3DB730699286FB43B837AF0D676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818100, "uuid": "6f4de6f2-5d00-4d74-a312-3338810d1997", "value": "6144:W8tTPA7OBzabKacEK1dAnJd7pLfdfM/9hWfAU:W8RAqBzabKacE62J7p0/yJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818100, "uuid": "d1270a93-0c4b-4310-916b-ab01e2bf05ab", "value": 231680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818100, "uuid": "fd0130e7-7e66-4e6e-b8aa-c5f48fb70e4b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dea76836-1981-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818100, "uuid": "2d2cd32a-5378-4549-b269-e117565cf7e2", "comment": "Malware payload (Mirai)", "value": "25d839c328b3c9d45bc26aba35087d7b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818100, "uuid": "8259efd7-3668-4f97-830c-feba65202ee5", "comment": "Malware payload (Mirai)", "value": "a14a1eb344f45734df1dbf26e91dd5e2b184d0a98829649db89831a4a38d29ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818100, "uuid": "38e9cf3b-c37c-41bf-9bbf-d20217d82420", "value": "T1D9D35B0673180E17C5E349B02A3F17E483FEE5D121F4BA89691F9B6A4672E771482F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818100, "uuid": "53a5f3ed-2083-4fe2-b661-61dadac4e118", "value": "3072:oWGIf1/UwfhJdU80rutbYUaDGMsMA9TK1t:oWxN/UUDGKbYUaiMsMApK1t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818100, "uuid": "5b7a3df3-7608-4f2b-8ad3-a2e17e03464b", "value": 134840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818100, "uuid": "f2d0d58a-68a6-4da9-a7a3-0b02f039a16d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dea82e2c-1981-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818100, "uuid": "da67bd09-c808-40d8-9f2b-64bb0f528183", "comment": "Malware payload (Mirai)", "value": "085efcef06ea995885d7879fd3af2be9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818100, "uuid": "79a6394e-5730-43a7-b3cb-80909db55533", "comment": "Malware payload (Mirai)", "value": "167a6cb4c56ddca68283a29cfee5a1f41799022cc4adbc873b71dc6d3f9759e1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818100, "uuid": "f4861a28-2bfd-4895-ba96-752422834721", "value": "T15F04B50E6E198F7CF79987345BB79E31925833872AE1C582E1ACD7105E6024F641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818100, "uuid": "d3d94d05-01e7-4c73-8077-f45e0bc48c2a", "value": "3072:1OATXjpCgqDJHDexBJKfjPV4kuMu8hJBQX/uw9EfszRpSP/QBrj4jTv3TcJ2tD2i:1OATXjpCgqDJHDexBJKfjPV4kuMu8hJH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818100, "uuid": "949e283c-6965-4fdc-9ea8-2b969cdd481d", "value": 175820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818100, "uuid": "d20a05e5-c513-49ec-a9e2-514a0168754f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "deaa1431-1981-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818100, "uuid": "3321ba6d-939c-4fc1-bfea-3e40d1dbbbf1", "comment": "Malware payload (Mirai)", "value": "19bc85789a5ad880d2d7deee467d36c4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818100, "uuid": "17681aae-ec33-4d2c-b00f-774a48338f7a", "comment": "Malware payload (Mirai)", "value": "346a587cfea8edd725938e6179f7e1581eeb397249b9a75cef398284dea40bdf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818100, "uuid": "4b0a34b3-2e59-4f92-87e4-a9a3b26c7fdc", "value": "T16493E551BC82562BC5E023BAA67E668D336477E4C2CF722BC8214B257BC561F0C63F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818100, "uuid": "4a7df3a8-14f7-44ee-9ee8-f18c96ce651f", "value": "1536:Cd+t0rbCuNhS7CVha4m2WiLMBZO+WC27nVDuw8GSr8kn:8+tsCurVDN+ouw8L1n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818100, "uuid": "1ab4f77e-a7d6-4856-b957-5ddce10e59cc", "value": 95720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818100, "uuid": "923da320-b0a8-4601-9497-ebb0722cfb22", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe73334a-1981-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818153, "uuid": "8010a9b2-b0da-4100-903f-b6cce73d1f53", "comment": "Malware payload (Mirai)", "value": "0932d467be6354d8f8c522766bc810b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818153, "uuid": "eab674e9-e25d-4883-971c-8e06069c2d2f", "comment": "Malware payload (Mirai)", "value": "36723c70b4d3629c334f811a3721e5a5522747d4697e6fa8865a38ae8420664e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818153, "uuid": "631f24ce-d6a5-4900-8ed1-e25ffa1f6bef", "value": "T12BD33851B8829A27C5E523BFFA6E028D331563E4D2DE72178C215F217BC691F0DB7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818153, "uuid": "d0fefc96-30c5-48ba-a3e7-62fdc56c9a01", "value": "3072:JuVeGJFWOgt9ctajH1I7sb41o+YLyXzXgvA:JuVwt9cUH1I7sbMeLmLgvA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818153, "uuid": "9ade8b81-e232-4d03-a8a0-526c97899992", "value": 140756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818153, "uuid": "9a050798-0c38-4eee-907e-d42111df7e7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fea30e39-1981-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818153, "uuid": "e38934a7-cdd5-4814-a825-be2aee0b1f65", "comment": "Malware payload (Mirai)", "value": "2688b64303ffad23b3a276656a5746c2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818153, "uuid": "2952a25b-651d-4d2b-bebb-cc2d8c8db4e9", "comment": "Malware payload (Mirai)", "value": "31429fffba08d2eebbf70e6ef2efc8a4560c981a91056c750d2a72ac99edd543", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818153, "uuid": "5187c167-90c8-4544-adf2-dfd708bfa79d", "value": "T1AD041A05BF150EFBD89BCC3B45F9270529CC581A22EA6B36B934C858B54B25F1AE3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818153, "uuid": "567912f3-16e4-42f1-93e8-e238a3669581", "value": "3072:J60NEpL/RdBtJN9xFZ9hkOmG5RdelJgtTwn2APPMuEzvQ6WJ9G2/7ZiYlTBVmJTT:J3CTRdrD5GFnrPUNsNzZt06", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818153, "uuid": "8a4cbc9f-fc70-466c-b499-076f403ca8b3", "value": 179916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818153, "uuid": "757c5d39-6fd0-45ed-b352-722c1e92c2bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "feab965c-1981-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818153, "uuid": "9a80e48f-118f-4eb8-a0dc-3de464081920", "comment": "Malware payload (Mirai)", "value": "8b3754ee1f2c4d48f639e016f3f22a5b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818153, "uuid": "2cb3fa29-5ae4-49d3-9c7e-b3847325dd63", "comment": "Malware payload (Mirai)", "value": "57f782327e62a5946d10c7be5cc58b4806668bafbdf80ef2324e39100d9f37cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818153, "uuid": "b8fbabbe-9a9e-49e1-b0f0-8822377fd0ad", "value": "T1F5C33A06F58184FCC08AC2341B6FB63AA935F1DD1238F6E76BD0AF127D4AE614E1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818153, "uuid": "5d4b941c-c691-4632-99eb-ca73eb2ca3ad", "value": "3072:pxv986gurREnQI8ysmTn645T1c4n2pPCZzFr0PGvmDxN4zQrPUAackTzSj0:DPgurREnQI8ysmT64J1c4n2pPaFe0ziN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818153, "uuid": "299e8b6f-b8a7-4066-9513-5849fb5eda22", "value": 126304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818153, "uuid": "5b49e104-ca4f-469d-b7b0-46f8494ac719", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "feac2024-1981-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818153, "uuid": "b7dd31c9-a554-4fa9-980a-d3761e5bec21", "comment": "Malware payload (Mirai)", "value": "42b4f0ed28be47e2ec801ef8ca3021f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818153, "uuid": "4214506e-1729-4f8a-a408-3fa918d31447", "comment": "Malware payload (Mirai)", "value": "5e753270b1a4906207487542b15d7e065a6640e9986af6db418b107e4677e018", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818153, "uuid": "602a016a-9d90-42cd-8177-2e296d77343d", "value": "T1E4B339C0EA47D4F5DD1642302277F73B9A32F17A1139DA93E3A89F327C52A41D90A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818153, "uuid": "762abfa5-36e4-4155-9159-0985ad30363f", "value": "3072:XFmzGpEWmXBLFkpzjYS3Z/5+JcDEh6ohHw0pJbLv:XFmzY5mXBypzjYYZ/5+JnlHLv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818153, "uuid": "995cbf62-fa77-4d0f-961f-06e20f6b4430", "value": 107824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818153, "uuid": "c5f2baad-499d-4b6f-9412-50148584a320", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fead65a4-1981-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818153, "uuid": "58d675a0-3782-46c3-89e0-ceee222e9bac", "comment": "Malware payload (Mirai)", "value": "cb4c684a9e00bae50a43bf7373d22527", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818153, "uuid": "3fd50763-074e-42dc-9bf7-0d9d9c1f920e", "comment": "Malware payload (Mirai)", "value": "ee33447ffab0f2b62be26fcedbfdc575d1e5f6c2966d0346edd824538ab065a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818153, "uuid": "366476ce-6464-4a27-a5a7-8e8c9dd42a01", "value": "T189E34A55B8828A22C9D513BEF92E018E331367A8E2DF7213DD205F2477C796B0D77A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818153, "uuid": "9d39f86d-7784-4bc6-82ef-5ea4ae17d14e", "value": "3072:CotWnBLigk1Tc3bCC0DvZe1k6aU6zL6EiueCo2ke:VWnligqTcrCCqeS6axIuecke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818153, "uuid": "75d1b3c5-71ba-49d5-a296-7f979cebebbf", "value": 146256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818153, "uuid": "f7acfbf9-c516-4edf-81bc-a31b950fd9bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "feb3fc4e-1981-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818153, "uuid": "2cb25eac-0db6-4f1e-92c9-ff7caa705f34", "comment": "Malware payload (Mirai)", "value": "610c75187fba6ebc5ebba2d722d198e8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818153, "uuid": "9f42fc9b-6782-4a75-9a6b-c509187d9eb5", "comment": "Malware payload (Mirai)", "value": "1165640c96fd44b4ec275c6e800d0101133aa62b4c6427a37505ddae034b8529", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818153, "uuid": "5bc85403-f570-4c48-859a-1732fd90262d", "value": "T115C3AE73D42A7EC4D1554030B8B5FEB51B61A5C041935EBB26E9C87A00CBEA4FA0AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818153, "uuid": "9a3b4e24-828d-4eaf-9824-c1554b73c794", "value": "3072:hfpZykqkt436I+9eIHfmNOkSMPXeC4GnH8:hRZ0F3BcONOkvZhnH8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818153, "uuid": "92a0bac1-bfd9-41c5-8aa2-9b782be22428", "value": 120332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818153, "uuid": "3fd1576d-8285-4660-a7c7-51900ff5490f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22222fcb-1982-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772818213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818213, "uuid": "8acebcf1-5cb6-4c68-9b86-7207d7c63410", "comment": "Malware payload", "value": "209b5ac518dbf3faabbaac295ecd8e01", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818213, "uuid": "e5ace8bd-0686-43ad-8e59-cf2193980b15", "comment": "Malware payload", "value": "2d839c9e682c3061140b88ecea85adf03e2b341e7db2c60b2c274fbb88bf667e", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818213, "uuid": "21fad33e-d639-4357-9615-0c5be5aa5ac5", "value": "T1E9862323E28EA33EE46A593549729A10543FAE61541B8CB3C6EC7D4CCF395A01D2EF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818213, "uuid": "7acc92b4-b535-4fd7-bef6-035e0a6cce96", "value": "e8ac1646024d52d1534a88da2e8037cd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818213, "uuid": "1e5a466b-2f04-4a89-8d89-7246620edbae", "value": "196608:rDbPuzokdemm0hWrUatDQzZUVeUx3AeEKF19pKScaJ:rDbuvrhQVKUV/uKF19p9J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818213, "uuid": "fc412b48-90f4-444b-a584-573d7eae62a5", "value": 7904769, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818213, "uuid": "b893c9a9-bceb-4e54-bb5e-281310b0f15e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "712f0c6e-12bc-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818638, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818638, "uuid": "b4d62a83-41e8-4582-b2ce-83694559adec", "comment": "Malware payload (Mirai)", "value": "ae9b133d3412ef45adab680aa8004edc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818638, "uuid": "09c9df1a-0a87-41b2-93f4-5a8f984d9f96", "comment": "Malware payload (Mirai)", "value": "613022513f8f36ca46ecc90c7706eb8d4497da88dbfff7c7b3d2442c9d4c6a95", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818638, "uuid": "02d0195c-6d4a-46dc-a435-1f88e6796fed", "value": "T135F2E020A7AEBCB5C9B514B5F229080B350B2778F3D58434779B01CDE69B58E83F97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818638, "uuid": "8f2de8fa-4ec4-4dcb-9661-7dc41689431b", "value": "768:SBDPThx4M4T9XG0sBjju09N1yx/S0LYPwsVdU3rLQxs3Uozq:gPcMTnd9N1yx/xLYosEr5zq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818638, "uuid": "542b9b59-a732-4862-bc7e-02dedbee4b75", "value": 34436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818638, "uuid": "d206784a-cd40-4bc9-aa67-940600715052", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "626d0f6d-12bb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818641, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818641, "uuid": "ca857fc4-f60e-4862-9fe3-2085a2ca2127", "comment": "Malware payload (Mirai)", "value": "580e6f043f6e42349a45fd26bdbd2b98", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818641, "uuid": "1bc40e92-58f6-4efd-8aa9-bb56c44e4f78", "comment": "Malware payload (Mirai)", "value": "9bb1badca0d17c17ae7061fcf7837b69e932f66872caf0cee2707f831fb26b30", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818641, "uuid": "73093690-1d7b-4db5-8bfc-77e4d359985a", "value": "T193F2E14CB6DB3900C9AF3DF6518C1EBA1E48BC9682F56BD897201CC4E4B94DBE0159", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818641, "uuid": "1749fed2-0fe5-4c14-9363-749afd894a59", "value": "768:TZdtcsIq+0LgOcsBqb2RriAMTc/2QsNdyOhw0hUKcxkbTvRyqnWJ:1dtcJU8OxRrOTc43aACxmyqU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818641, "uuid": "a5c9f39a-db2d-4e96-91df-6857930cfbdd", "value": 36992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818641, "uuid": "e66a7b6d-285a-4f4f-8876-8e13916f189a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63b659a0-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818752, "uuid": "d3837060-cc26-4fd1-bf4c-09b0d64fab14", "comment": "Malware payload (Mirai)", "value": "067df61e97c272079e67df54306fa42d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818752, "uuid": "2083100b-f9ea-4091-884d-174ba9922d5f", "comment": "Malware payload (Mirai)", "value": "cbdedd6f4deae17d8d5f50ecd3ddff4c5ebd9738e5a507efa54636552943a7e5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818752, "uuid": "deb77780-c346-44aa-a243-482bf11ec791", "value": "T16B837BC2F743D0F4E8120A712277EB315A77E13D5069EA83D769AA71FD42601E72A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818752, "uuid": "d55ad4e1-ce92-42a6-bf7d-713b5b988bba", "value": "1536:4MV7EcnKzqUHdgSAAz3Vx4l3RLF0CiwAsrswfer1K:nqzqKdgS3z34l3RB0CinszWA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818752, "uuid": "d2496195-b02c-46ab-9f59-322db850ea5b", "value": 83600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818752, "uuid": "8942d87e-ce1f-48da-9b87-b0b9fa389fa1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63b89604-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818752, "uuid": "069410aa-6148-47c3-97ef-ca9752dc22fd", "comment": "Malware payload (Mirai)", "value": "09cbcd7475de8c8fc0da63f448910b9d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818752, "uuid": "130b2c41-980e-48c8-a2e0-759a6d4dcd2c", "comment": "Malware payload (Mirai)", "value": "aefebbfd0e0d483092858b0338a45bb3428884c5551763e0863d380a8381aaa9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818752, "uuid": "3e47b4c8-ae4a-469b-8a3b-19eb8da27142", "value": "T164C3E686F8502B36D7D2B6BAF70C039D7A2E0358F3D7B2118D345E6173C9AA56D3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818752, "uuid": "dc4f8790-3dc4-48c9-8fa9-e83f9658ef47", "value": "3072:cTEIs9teU99j/5sWw/lwWujWszCxzSYBuVBuZ:cwbu/lQjWszMXBuVBu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818752, "uuid": "127db65c-1918-4a75-ae11-8ce5533b612a", "value": 124728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818752, "uuid": "0cb18dfe-408e-493c-aa5c-cb86d77c8ff7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63cb2344-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "97755a7f-a83e-4d3f-86c1-d25cdbf96bac", "comment": "Malware payload (Mirai)", "value": "cb74de6371afb1baca3d8b14ea40b58e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "afd44764-df7e-4525-8a9a-d56d214e23ff", "comment": "Malware payload (Mirai)", "value": "d8364dacadc190757bbc10f2b932f3c3db6733a056eb45f4e1b947b0d38a8abb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "67e084d8-1aea-48db-8a9e-f74a4a095cfb", "value": "T1AF935C02B70C0A43E0575DF02A3F57E2C3AA66E120E8FA89790EDE4596B6D325547E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "3eee47b3-4f94-47bf-bc03-547214d9f9d3", "value": "1536:RcNACenYLuz400CO5W6j9SYNoGbOrbhDyBiJkBkb7M1091WrZ1aggofAlY:iClYS3rbJyeb7MgWrfiY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818753, "uuid": "ab5a55b2-e151-418c-82c1-9e64299e18ca", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "e9fdabfa-193f-4dd5-8728-7c5251d0ab31", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63ce6a9a-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "69fa1e04-f650-42f8-8d80-ed598d6a2ace", "comment": "Malware payload (Mirai)", "value": "37d2682a93c7e6f1cfaa6b5444d6c45e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "44e68404-65bb-4674-bdb9-2950b5d25d1a", "comment": "Malware payload (Mirai)", "value": "0b75728c66d2254a5622017ab375525b0e8e085e5c8cc2b2dc8ca8a09f57c7a8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "272483e3-db71-40f4-a793-d1bbe4af9c89", "value": "T198933A52FD818622C6C116B7FB2E428E376613A8E2EE7203DD255F2137C795B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "12ce25de-513c-4a39-a578-46f0b0534649", "value": "1536:xFju64oZnUCIK86kGHL2XrHH9FjmlHa/ZJd1KyjqdvXLB:xFi64odUCnKbHHDSlH0Hwl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818753, "uuid": "d803ebcd-548d-478c-bd03-97da29b7ab68", "value": 93452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "f38fc041-c48f-4a10-b280-a1303a7df6b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63d1080a-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "69e85a68-eddd-493e-89b4-b50580c1ffa2", "comment": "Malware payload (Mirai)", "value": "b664fc818c44394f4f722f40290302bf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "62aff47d-3240-4c7d-8f60-5efa411f75f6", "comment": "Malware payload (Mirai)", "value": "46c6afe2d46cdd1321f3ff8a01c165a9ab2ca3ebb1bef0e016e4110e9ba66564", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "90c1f96c-1b5c-4e83-8319-d96748fa8f44", "value": "T11B936C85FB43E0F4E90609B011ABF77A8A31DD361014DD6BEB98FE72AD32A1391167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "ce56683a-57d1-4ecc-9da2-6f9b24ff74f5", "value": "1536:nsm9i1KJdfC+Sq0zPUoUeRNjRmnj82QRiqoaRGUw31QUHLqEUuKGr:nsesIdfCpVYoUeRNjRmnYyVuiYHO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818753, "uuid": "6720a69a-3812-4529-b6bd-5988749dee42", "value": 95508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "13542fd2-eae0-4112-b4d6-3996ad630bbf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63d47e04-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "99e41ff6-307a-4961-99f7-c310a3bb867e", "comment": "Malware payload (Mirai)", "value": "c09b6bdaf5394952a0548e09bb9ccbbf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "7d82d44c-8f5f-4e52-ad55-07ad84feb9a1", "comment": "Malware payload (Mirai)", "value": "89047c4d5133421e773e5522e4891e36c68cf06cb72cf0f9495b92cd77a3dc13", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "a8df3731-3e1f-40a0-8dc3-d5220fa7cd97", "value": "T10EC3C85E6E219F7DF368833047B74B25A75823D636E1D685E26CE6001F6038E241FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "e565427c-2e5d-496c-a38a-d188fa8bb2ef", "value": "1536:GZlDgu2haCVrzs2lBChIT0VGZ70C41rHQ0MHFBef0oO0BpoC4:qgu6tXs2/YVVCmrHWHFR04B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818753, "uuid": "02350efa-2be1-47bf-9ee2-2d1695a2fc43", "value": 118400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "0f33ca95-0eb5-4eb7-9e7b-d69caad2fe2f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63d937d3-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "4f3c3c9d-79ba-4e60-ac4f-2b077c6472c0", "comment": "Malware payload (Mirai)", "value": "92e2bd3338014921e94f457cdf82d7d4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "a93a5cc9-1423-45d9-8ca9-83d807cc1d22", "comment": "Malware payload (Mirai)", "value": "6f547cbfc9fffff13a85cdc1e28519789925341bcc8e8b6b92314a39354dfeee", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "43f7e641-2399-427d-a089-cba4e8c89dd6", "value": "T18FA33B02F6F68DEDD8A1D174459BB126F430F43E5138F213A7E4F9129E9DF20992AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "2d603b37-11ab-43ca-8bf9-39403f7fdd8f", "value": "3072:2T5ten0CcKoXPj2E60QBkJYzd1A7uhK0PQWyQOhRT:7z31riqK+yQOhRT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818753, "uuid": "ebe7bf5a-1b1b-45cb-b167-0358b02f2ee2", "value": 107104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "c905d754-1166-4d73-8056-241f300327f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63dc1d2e-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "dfe0133c-feb6-4234-ad98-2123baf27c73", "comment": "Malware payload (Mirai)", "value": "c033c862455890cb8a3891b1897e96f7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "dc9fba45-ae8e-4b12-bffb-17d996ea6022", "comment": "Malware payload (Mirai)", "value": "1e5cb8fa383faf84647bf000896ab497c7f4026d7fb7a1c1310345997a30fef9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "ebc22da0-51db-42b2-891e-34a4c956d1ae", "value": "T1248328C1BA4BC4F5D90748304067F33FCB31E6398061D25EEFAA9E65DD7364266262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "38745b55-f94b-4662-ab79-80f4c2f8bd3c", "value": "1536:N+O3W1dz9BCSKJYHUeWAcaHWSQCYjxCAoN5F+hN9:N+J1d9JKjeWHL/jxC9XI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818753, "uuid": "1caf3b63-1290-4a20-b866-77683bdd6dd2", "value": 87696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "89715711-610b-4147-8cae-0215a055d2c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63e24923-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "157e6ed5-0b65-4170-a2b8-c701afeb72c6", "comment": "Malware payload (Mirai)", "value": "6e427110113f65ab8aa3cd81bacbee09", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "0d8a3491-3d68-409a-93ca-0bbfa6ade4f5", "comment": "Malware payload (Mirai)", "value": "248474467abab21e8d2bb6421bc36318ed8858dabcea0d89a521d9127f47dd6e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "787fd2ec-918c-4229-8d7b-320cebb8c95b", "value": "T196936D02B70C0E43D1675DF02A3F27D1D3EFA6E121F4FA88791E9A8591B2D361586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "1b4cf194-6bcb-4120-b5d3-a071b8f43023", "value": "1536:J0kTGvVuQTzBrwJi9Ma5xuUugrdCzG6dp4qKLHh/G2MivyC/r5jugk4tJm:J9O5T/fCi+4qKvMxCRjm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818753, "uuid": "6bb0e870-8cd2-4839-b360-9988c2788bef", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "f8c95483-375d-4fbf-b555-d29815b84130", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63eade18-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "9d1dfdce-a8de-40c8-8aed-bb6f00882d68", "comment": "Malware payload (Mirai)", "value": "536c713801b9128020709e6f6a5b3b84", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "21801ed5-034f-4679-a5e6-c4f328512199", "comment": "Malware payload (Mirai)", "value": "34798d8838a176625c6789be353be30a943d5b0efb636c00a2818bbdaab6f07d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "b68f5fa5-65b9-45b9-9311-4f2e76325e23", "value": "T12EB318D3F810DEAAF44EDB3B416305067230E7964F921A3B266B3557E87A1D42077F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "3fa4c582-c3a7-4d55-b91f-37fbb93cdf01", "value": "1536:8RHOqNMW1lqbgBsxq3rDTvBZM8W3nof6+T7U3LDxq7qUEwudc4TpFyn7KXx:8HN1lIqsQXTvBZkg7YLlwudc8Dyn7KB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818753, "uuid": "b2cdb452-8afb-48f4-98d2-70c084e8b806", "value": 114056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "65be0fac-fa9b-44f1-bd70-70e47d109f68", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63ecbd42-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "059216e1-cb02-4e35-9354-cc6d8d5bf02a", "comment": "Malware payload (Mirai)", "value": "1608227629e15371c957db861068b292", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "a3f74326-1a7f-4f9c-b459-137148e03d89", "comment": "Malware payload (Mirai)", "value": "5a07a6eeeef206e25a96c78aae7d6dc3a419cdee2202c955617506645d0384b6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "df8952c1-1c18-49d1-9c7c-9cd7b3e62835", "value": "T1AB435E92F892456AC6C117BA771B978A33A253A5C2CF7313CD080B6177C9A4F4E77E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "def0a19a-7576-434b-b902-41c8b35cd862", "value": "768:TWcltKWWiXZ2/x7N8OMXLPtdjYocDCW7Y4CEIMfl2Fr0nMz:TBltFXYSOqPtdNcDCW7OWa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818753, "uuid": "1a9dff51-87c1-4e73-a080-1b61ca978261", "value": 55452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "3bc457c7-d488-4e23-932f-6aafc5764470", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63ed311c-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "ed6dc6b4-d012-4369-ba1f-77c0cf03bec6", "comment": "Malware payload (Mirai)", "value": "38ea4d206fe17ad4889d0cfe43f5bd0f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "fb694598-c261-4f7c-adc3-460e65d69e44", "comment": "Malware payload (Mirai)", "value": "6ef8d8dc61e0f8b67932d5c3a086892c7b4b710f463acff061ebb6a633a6956a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "5ea78ec3-e425-4d0d-9e02-0baf4410fae3", "value": "T1A6C3F80AAB610EFBE86FCD3706ED070525CC651722B87B767574D828F64A24B0AE39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "8b888444-d985-4c1a-9426-16641ac794cd", "value": "3072:ln6MWtgOKvr7B+6d2pIWvgdqt9au1Afb:ln6MWtgOmH86d2pIKkqt9m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818753, "uuid": "e34429cc-24b8-4e66-9d8b-b699e8ccac9a", "value": 122496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "7cd17a26-f5fe-4fef-96c9-e2cee5057c65", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63f1e520-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "2bf98256-b58f-4e14-bbcd-c6dbd2a862e8", "comment": "Malware payload (Mirai)", "value": "4cdf01b6b45e0789312a068b08725eeb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "5ef3fcaf-d6df-4179-b108-37e9c277c395", "comment": "Malware payload (Mirai)", "value": "a7938c2d6ea8db8f3334437920e4254083a04785705822aabdbb7c379a740e1d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "e1303c3a-fc9b-452a-9841-23a75cf0d0bd", "value": "T101A329C9EA7BE0F6FC060C706077F66FC730A9318064DE02DFA96E55E923A51910FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "ab1a9aa0-63ec-4cd6-a97e-68e65fd669fb", "value": "1536:xhFI+6o88paBP7OUwWo4joDG3y5bK+AWSWLMegAGcstgGf0X5uxBs:xhFIboxpa5vVoQfjW4egAGXtY5uxBs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818753, "uuid": "7ecd3f98-3c33-46f9-9574-818f14125e65", "value": 100048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "6a27e74c-8469-4340-ab5c-8ac71c56fc4b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63f41eff-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "ffce7141-7d55-414a-ad5d-8a74c4816be5", "comment": "Malware payload (Mirai)", "value": "3375344b13f03922c1a29ee3899aa17f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "09db0e58-0da5-4f45-abca-fbad14e2c33d", "comment": "Malware payload (Mirai)", "value": "14779a841ccb985767f66367ecd3644d826f23c921f52100eda9eefe9189fce9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "748b3079-7130-4e8a-9d9d-42de9e45987b", "value": "T163B34CC9F7ABE0F0F9060AB02063B72A9A34D9365111ED26F3D57D73AD35602916BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "9650647b-4e46-4fab-8763-6cedacbf004d", "value": "1536:SiJpvf8XJwwBNV47YFx9K2ukqK8HtvPU6318aqoPMWwyPtJyinnn/iu4Bhr:xvf8Xvn4yBuVKe1+e7D7nqu4BV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818753, "uuid": "d0d095a1-0a48-402c-a4eb-192edc37761f", "value": 112140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "d76fd598-a85a-4ca6-915a-138ab6e045cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63feb3e4-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "28bf4aa5-a764-4355-8a5b-b94ce8570aba", "comment": "Malware payload (Mirai)", "value": "30f6640ce9b6dd238d66ca71c17ac09c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "640a7598-909b-4889-8250-a434554785fe", "comment": "Malware payload (Mirai)", "value": "12cdb69e5d5798f8b5db55d59e36623ffd516e4f49c0e01885f7571a520ca765", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "615d2d65-385f-485d-9772-94c5a7c27133", "value": "T172934992FD818662C6C116B7FB6E428D376653A8E2EE73039D256F2133C781B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "84676cba-f008-4649-9d06-0443e9d36d7a", "value": "1536:F0XpWNg043co/sTgvlwSBeMLs9jT9PSCp7Mn3qK+BQz0OckKM21:F0ZWNg0qvTe4mjTp3p76qKI+0Ozi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818753, "uuid": "de9564bf-9678-4e0f-a207-74eb0990317d", "value": 89940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "ebe9c50d-3b20-450e-b361-a2c9dee2dc62", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6406efa4-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "2593e29e-ec1e-4c26-b3b1-7c8cb857c61a", "comment": "Malware payload (Mirai)", "value": "37d167e2e1d0a1a1223a506913dc8220", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "041f0ed4-cee9-42f8-9036-54b159a46521", "comment": "Malware payload (Mirai)", "value": "89d1cf0d80f26f4a506d666e0ffc7df7f344511da9e62c20fd39efa75850dd39", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "63888d15-ae25-485f-b272-08fceb057614", "value": "T158E30D8AAF713EFFFC1ECD3301D95646214D565A12A86F7B2A70C528E28A14F49E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "b1b98501-e714-48b5-b639-3a15e5b8abeb", "value": "1536:2BFkgl6O0cn3q1Zuk2pMQmBz8l72GaC7u5xnXNkXrG8FKpcC7cFnZ/vIAJqY79t4:6JINopaC7PacC7Anl3wLNuFBwl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818753, "uuid": "dd1f5654-6475-4396-90dd-3a964aaaf705", "value": 156348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "506ca1aa-3de4-4921-ac4c-85d1a9a27ee8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6407cd60-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "c240a4c1-abf7-4850-9119-64f918486e7f", "comment": "Malware payload (Mirai)", "value": "9074749ab89040f3cf5f1904050205f5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "daf3635d-6321-4d01-9f6a-f321de484c3a", "comment": "Malware payload (Mirai)", "value": "e4f7644370bb35aa6c23724c5c5384d3b0d44f719adf80aba315f64594bd4943", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "f50688f1-3c77-48e6-a48a-a76ff586307b", "value": "T18EC3D585F8906735D7D3BABAF70C039D762E0358E3D772108E345E6173C9AA96D3A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "59894c86-325b-4063-9ec5-9a62f5e12168", "value": "3072:CTiI59CeU99j/I/twx7wMujqLp9jK4iZuVBB:Ceuex7ajqLpZ3iZuVBB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818753, "uuid": "4eb5f2ef-1cbb-4ccb-99bb-88617c1415ad", "value": 120632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818753, "uuid": "ccfc3ccf-1289-4829-8ac3-14fc25dcee70", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67b1634d-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "d313e5d2-bffd-4fd8-8226-84019060a0be", "comment": "Malware payload (Mirai)", "value": "44b6d2467c389f02b1fc9bc450b773a8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "3cc65dda-f487-461e-983e-74e4a56250f3", "comment": "Malware payload (Mirai)", "value": "44e0eb07373a95a0c4e1e6f176e20c371f687d20763b16887d15c40565dc1ad1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "d0ebbd8c-1bf6-4b46-a6cd-34ea7793eb76", "value": "T16BA35CCAF76BD1F1F90606F03073BB569731E13C5015FA02E7A52833E825616A627B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "67d0cf02-692b-47e3-a86f-969219d530b3", "value": "3072:tQ8KCEPE+JVm3dk+9bzZYB9p31B+lO5UuxBM:tQ8KCU5zmKV3ntSuxBM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818759, "uuid": "3b0ebbf6-f0d1-417c-a58e-6df8870b33d3", "value": 100048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "13264768-823a-4a05-aa53-f7f4847c15ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67b4d72b-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "424b1366-d89c-46d3-93ee-813b9aaeb83d", "comment": "Malware payload (Mirai)", "value": "9508a25cd97a58468505adf3ab94bf55", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "8c47e926-fc59-4867-aade-d70db36257ab", "comment": "Malware payload (Mirai)", "value": "50d3c1fce3f5adfa7a50c3e72e4409cea1bcca69f3a0f4ccdaefad74a5ddcffd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "8f777aab-4ad5-48c5-9ba5-4f9fb0a6b979", "value": "T179935A13B9C480FCC889C13057AFB136D963F17E1279B25F67D4EA127E8DE512B6A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "f056fd00-9a0c-49e0-beb6-6a26d0fb25b9", "value": "1536:wOJWCxljKvh6uTH/HwinvUsBvhzAA1x1Asqe+tHXXnlGJHqBO:wOdvjKvBTHzvtvhZ1x1AsqDHXXlGg0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818759, "uuid": "b0062a56-6465-4617-93d5-3e17db5a5c3a", "value": 88928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "bceba52f-ba59-48f7-8f21-1ed01a48cea2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67b80642-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772818759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "6eb7558d-0413-48c9-8edd-38d009e10ba5", "comment": "Malware payload (Gafgyt)", "value": "e18785269062ee21a5f9c386a977ee51", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "b0f8c0c7-604e-4bd8-9de9-6dd8914c8e67", "comment": "Malware payload (Gafgyt)", "value": "bf1f9d9f1e07d33303690acfa885a0b772414c2a7c65dae4710aab4f9eaa1a8f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "5bffe6b5-0590-4425-872a-30fd1ee383b9", "value": "T11FB36C7AC1303EB2C6A7F071A832657A07D565180B0E0AD24A6EE351528FDCFB15F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "d66205c6-085f-4ace-b335-592c4d354f21", "value": "3072:DksC3uxCQiijl/uAD5tBWI0Zv4p5huvBCn:QsC3/QTVDDBWFCduvBC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818759, "uuid": "e47d7580-e796-460c-99df-c824edaf6fe1", "value": 112588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "8847e177-cee4-4acc-8826-484171b1d470", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67bf12f3-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "3ac45380-5ef3-4188-9369-2140cd86eb38", "comment": "Malware payload (Mirai)", "value": "d3f71db2624bb69ba15cb9d39a5cae31", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "a74c4a5c-6967-47ff-8502-3c1cae48f3dd", "comment": "Malware payload (Mirai)", "value": "65b84650ff8480e82f6398afdf33f51679f31cf57e4a451d78f2c7ccea25c7d4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "9b1a84d7-93ab-4127-a8ab-7a8391b5909e", "value": "T1AD434D92F892456AC6C117B6771B978A33A363A5C2CF7313CC080B6176C9A4F4E77E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "f307d96e-7893-4efa-9512-fb29d28a5d76", "value": "768:IsWcltKWWi3Z2/x7N8OMXLPtdjYocDC27Y4CEIMfl2Fr0nMz:IsBltF3YSOqPtdNcDC27OWa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818759, "uuid": "93326fbd-211e-42a7-88df-aabaa8219b36", "value": 55452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "ad63cef7-823f-41ea-afab-2927da2a4f8a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67bff65e-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "4bc850da-f3c4-42dd-83fe-212e87ba5076", "comment": "Malware payload (Mirai)", "value": "eda2f567c168832cdb87b146e990a59a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "3570fee2-270e-495f-a72c-2497efedb295", "comment": "Malware payload (Mirai)", "value": "7259f636b271375cfd8125378ed9cc436dbbfd80ed937dc0a790df378ec5946a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "1f415134-7a5e-4099-8303-f0f8768f1353", "value": "T156334B0299BC2A2BC4E0A77711A74372F1FB2B954194E64FBD660C4FEF583501A7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "b1c12cb3-160a-4ed7-8a08-600aaa9b9889", "value": "768:Y5erW8odLUY5tPktaTt0syt7SJxg2ZZqSwfUtlohjzR4zVkGMIZgTydwM:uK1ILhtaaKsyt7KyaZqSASohh4mQdwM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818759, "uuid": "cc90d1e8-c3cd-4662-8a35-84ae8469f973", "value": 53884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "547a322e-55de-4c5b-a712-0422f33ded4c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67c13cee-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "0c5b89f0-f01e-4591-a46a-bc2b266a9216", "comment": "Malware payload (Mirai)", "value": "cf46dd76a0cc16b5331838fdba356326", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "c27d1175-4fb5-44a7-8d8f-7a9bd98ff3aa", "comment": "Malware payload (Mirai)", "value": "cf0d8b4ccf8b9f7d2852c68ff2eaf839f33844ba276f268b061599e6e6b9203b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "1292a548-c1ef-49af-a024-54d062e46b37", "value": "T172C3AE83FA8728A0C86207F003C70FAD6F93A111CE5FD4E7AD1DA67B5A7A0DB15167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "a49f388e-1e66-42f9-9674-3b09a1e1e710", "value": "1536:hm33/oJ1EMlGnzyhE9UWlbjZbeG4S81lT8014pxs5tOg1SE8/LW8:he/61EshEeQfleG4vK014zgWq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818759, "uuid": "4ac00040-2475-4e6a-abc0-721f3b4fcfb6", "value": 124676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "027ccc7a-4607-4f34-9da9-e7a76ca49151", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67cb6007-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "10d2c77f-11e6-4903-8b2e-082c5f3f4687", "comment": "Malware payload (Mirai)", "value": "608fb905a8f4a2d5a7311aeb85369878", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "6f8cafa4-37c1-45de-915e-6b3a75f65c5a", "comment": "Malware payload (Mirai)", "value": "15833b64e5b5a08d9875c88c901c2687130618f4c283de2a6e699c66288a1657", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "fd820f5d-1835-4433-aed4-2553a338d2fe", "value": "T1F3839C23C9361DB4D45845B0B0A1CF355763E52681976EF698AACA3ED083ECCF94A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "e52b408e-7f17-48c5-bbdd-aef2390adc7a", "value": "1536:8OmkxPUOUubAF848Z+E7KEvnzho93CeXPF9lyD:8XkxtL1+E+Edo93tNg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818759, "uuid": "761cc217-98f0-45c1-9d0f-314488d07b85", "value": 83812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "db90db5c-3e29-4c8a-b798-79f5f934fd80", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67cbf378-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "831ad238-1ecf-43e8-96a0-f2ae5f5d7d99", "comment": "Malware payload (Mirai)", "value": "eec040b30fab92d7884315fb8b0b30f1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "bf18eb25-45ae-41e3-8ecd-0abdb03689f8", "comment": "Malware payload (Mirai)", "value": "a21679f3a94251932879bee5ebd5bf4b62d621f2c0e2fc7c48af5c6f4dbe5db9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "c08c2e26-f97f-46e8-ba23-4f61347d8448", "value": "T1AFB309CFBA0D0283D5A34EB81E3B37E58F7DD62211E867425506EB8447B193A4267F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "49d1fd94-da58-4340-828c-255ecc939a87", "value": "1536:6yKLC6PPMuq8OFhEThhypPX6BFzXczSpPVbWBXOiExPzQEMK0rx2FVGyxFukBrvv:HoFh4X6BFzXJpPVCsxPzF0rOTukBrn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818759, "uuid": "f6cb641d-43cd-4575-beed-1804b76f1e2b", "value": 116632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "d3adba4e-d212-47dd-bd35-5dd64b6a44ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67cf16ba-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "7f55590a-56b0-4a95-af5f-743098eaed7e", "comment": "Malware payload (Mirai)", "value": "1466315b9a8f25ef6479ba6c77915467", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "2f2af45e-c233-466b-844e-3ffc866f9e29", "comment": "Malware payload (Mirai)", "value": "3b30f6ba290fd6e8bfd7385358de98ff45704c428c1653dd97853382223a659f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "09641360-8807-444f-9fd5-d2098a90f667", "value": "T19DE35B97BE831490CCA386F012C3075E2BB342605F7E64E3BC5E556EE976DCA162A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "8e433d88-1c48-406a-a0b0-ac493546d90f", "value": "1536:gQZVV7c6QffviGuekMl1WjmUugBYOl815e18bx3meRigKNE5ueBiC/LW2:Y6OzuBMl1i79BYO6e18vigOKueBiCq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818759, "uuid": "11e1f065-8c59-4f65-a55d-4436c69d0596", "value": 149264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "91e6e40b-08b9-46ac-92ce-b2a7a60b848e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67d00758-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "92574f81-509c-4d36-9921-49fb651351cb", "comment": "Malware payload (Mirai)", "value": "119026c653319e1b616aa92d8e6d8d1b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "11c7965f-3106-4579-90c1-af246d9bbbf4", "comment": "Malware payload (Mirai)", "value": "b7eb50e81eed3519ac29ec4faf5d4a0a55785d9ffdf0c6c33bd489dffcb50724", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "29c0a147-8698-4e6a-b96d-3283f772f917", "value": "T18293543F1B231EB3D0D92031016762B2BCAED74834BC8BDB8CE1646D6E1A95D34596", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "8bde05e7-239a-4f81-af46-35c017df027a", "value": "1536:50PvxMozxIeak7lm5FrBDapM2/XsalMylgkJ02uPzNf1uhR7:50RMozx/U5l/ylgH9PHuhR7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818759, "uuid": "100266ad-7198-4e53-b7bb-17eff634c143", "value": 89844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "e8691e5a-8a92-40c2-a451-e8afd9a07230", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67d2b873-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "300a7a7f-40c1-4924-bbb1-5324585ba797", "comment": "Malware payload (Mirai)", "value": "42822010895fa1a71dc51d62502752f6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "f911501e-8f73-4752-88ea-ec4f29cb57de", "comment": "Malware payload (Mirai)", "value": "e966b61ff82002d2b86b2501fdd97e0bb53ebb8f79a48d18c704513202d6af20", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "ca9bc6c1-136f-461d-b0b1-271847c07e0e", "value": "T1B583B686F8503B79D7E1FAFEE748139D723A0398A3D7B211CD38656267C8B58AD341", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "1aeca677-a28a-4199-8d86-7c588da76b91", "value": "1536:Wtnb9HXFKOg7mXc8qYouOnN3epq7Yc2PBWM4DeC5uVB:WtJIO3Xc8qYouOnNikYc2ZWM4DruVB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818759, "uuid": "c4e2f750-2b83-40ce-b54d-1624f374cf9f", "value": 84756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "5f40aeba-0f01-4a36-87ec-8db0860c3087", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67d8feca-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "3b395d7b-d107-4f51-a0f0-743129edf792", "comment": "Malware payload (Mirai)", "value": "4029ecd14102ef8643cf812b4dc59008", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "886a5b31-dc5c-4d00-9fc5-cbc5b723cc84", "comment": "Malware payload (Mirai)", "value": "45f5da2332c5d791e59d8c3c28fbddef4220c764658d507761c7636929b633c1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "901409a8-5652-4ada-afc2-1439cc95d978", "value": "T1CBB31ACFBA0C0583C5E34EB81E3B37E58FBDD62211E46742551AEB8442B193A4267F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "502936fd-4aa9-4d80-a238-25594212a4e4", "value": "1536:8DR+/XVNbeu7XN1GNjv5uVRXVBFSjfsWaOaOWRSH39WdAid+2P1XyFukBf7D:82056XVBFSj49030AYaukBfv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818759, "uuid": "2008a63a-ab50-4971-a6ae-4e44879c4c7c", "value": 116632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "48b60023-6636-4a39-a107-571b49bb00c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67dbb17f-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "5fc93ddc-7912-44e1-8308-871682de2bd5", "comment": "Malware payload (Mirai)", "value": "4dc0fd90987910e0b9f82e1512681c8c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "815d3be8-7a67-4d78-a6cd-dd5d350b48ea", "comment": "Malware payload (Mirai)", "value": "527aaedef25c03c462a69ef5e511e5e4f62f45f5791a4a234c120db8aa43bcfa", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "da45f546-73ea-4eb4-b412-aedfd2ad14d0", "value": "T1F5E33F1EAE325F7EF7989B310BB66E34935912E333D0E656D1AEC6102E7024C585FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "5384164c-378b-40ec-b0f6-d29e198cad89", "value": "3072:8jnYAVmfMlNt4BIxM51SKPo4TRmdY6duZBEi+9:8jJmfMCTncduZBEi+9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818759, "uuid": "52970e69-c806-4efd-9061-74b73f4d6e39", "value": 156348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818759, "uuid": "e650904c-52d3-4b84-8dd3-7dca0c5e677a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67f3e38d-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818760, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818760, "uuid": "bee75b56-9b17-4f9f-b6c8-64711f0300fc", "comment": "Malware payload (Mirai)", "value": "8b562c98e8bb6f9b46620d0f74e0acfd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818760, "uuid": "5b9628cd-d280-4e84-89e9-39978f2c331f", "comment": "Malware payload (Mirai)", "value": "16d4fd7dbc82af3f972fa860f39cbd08410a3f8b20bc1af3ed299dea44dc2222", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818760, "uuid": "1207e5d0-ca66-4bd6-b45c-e45326ba0607", "value": "T10A83B786F8513B39D7E1FAFEE748139D723A0398A3D7B211CD38556263C8B58AD346", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818760, "uuid": "a6e5a6eb-b332-4346-98d8-e2d71776e966", "value": "1536:zknaZu4XoZuILp2TYouOnNTUGCHdbG70WM4DTrG5uVB:zknsuNuWp2TYouOnNfC9bG70WM4DfMuD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818760, "uuid": "3aef6cff-0fd3-458d-b412-02a0ec9e756c", "value": 84664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818760, "uuid": "322869f3-1421-4caf-b96b-c331f76877d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86e54197-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818811, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818811, "uuid": "c1207616-fab5-4f3d-a774-441d8e4067c5", "comment": "Malware payload (Mirai)", "value": "8db4095708eca1961b187dc370a1b489", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818811, "uuid": "583fe7d7-4772-40e5-9161-1e2dd45d3173", "comment": "Malware payload (Mirai)", "value": "b48beb1e9b25426470d9a9de67c71bfe3724f7ffc1d75092983704ff97eab2f2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818811, "uuid": "743aeef2-c815-4bf2-8be4-923e16d2e067", "value": "T135A34AD7F401CDBDF84AD77B4453090AB530E3620A831F76626BB967EC361A81927E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818811, "uuid": "e9d1f7ee-aac1-49ad-9923-994e5170cbdd", "value": "1536:kYXcoUyW4YMXDD/BOurrP4Vt4yCb8v3eHvWLNJ31hiZ6KzL4t2uDGnAA56:RXuMzDpRD4Vt4yCBA31YZZaDGnAY6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818811, "uuid": "a4e0a04d-c3e2-434e-8c1f-73986e31b08e", "value": 99888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818811, "uuid": "7179ebc2-fb7f-4edc-ae70-1d3cc848560e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0b1b111-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772818882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "41fda864-62d9-49dd-8516-928577603f3c", "comment": "Malware payload", "value": "1cf705a41d936c7d9b20783f041ebdfb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "cc470466-5be6-4edf-beda-7f509288c03b", "comment": "Malware payload", "value": "57143da9ad8f68aec49cd9cc60344dc6b0447f62ef10283a31bcca945462e222", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "e2f45795-c6a3-4a90-963e-8fcd5f5331c9", "value": "T1A5D2C70AEFA44EABEC7FDC73059A1B0235DD510A15A87F2A6174CC28F66E18746D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "44602db1-13f2-4f29-8ec2-0611e44e0203", "value": "768:g+VcDgFi/06elkki5AZzNLQPXiMxeuzSedMQ:gIcDWi/0Tlkx2ZzuxPzSA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818882, "uuid": "d311dbd0-e5ee-4e2d-8b93-44fd8b970810", "value": 29016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "eb9c6c2c-d444-4f66-becb-c2ce1455dd5f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1179295-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "764de3ec-631c-4791-bef0-25ecc8baac9b", "comment": "Malware payload (Mirai)", "value": "a21c19a56f1a995a76401a49ff043e16", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "62359f54-c41f-4cf9-9c54-ad359664ac12", "comment": "Malware payload (Mirai)", "value": "0efcd580a3ddfce60fcd5ccc25cf815572f80cfb84fef7f939efe6bdadfc109e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "7a441137-7b16-4ef2-88f5-89b95126398c", "value": "T1A9932A51F9829613C9C556B3FB5E429937160368D3EB3203AD288F65338E9AB0F3BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "4f2dddfa-4530-4f35-a951-4fab84a125bb", "value": "1536:KezHkSpNayqhbAku0Vgn8X7NlByi2ueFzVUDfI+3nSjXteOtcWe7lX:bkhbDu0Vgn8JDyiowwq2e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818882, "uuid": "1e9c37d0-0de2-4877-a166-cb684b5ea7c7", "value": 93404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "8be413e5-acf1-49cf-a938-49dae7606c8b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b122d104-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "e9e1bcfe-2b22-46a6-b4d1-3199ef318b63", "comment": "Malware payload (Mirai)", "value": "aec05b622998c8b4c59f7892e46b34ec", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "6a4f3a33-96a5-4d61-9e37-73bd9a006391", "comment": "Malware payload (Mirai)", "value": "21418433d4c93a8eeefa2479a2fde7706b7a85dd21bce3f855767909d9dba632", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "2cdd9e74-64ce-4d22-b0e7-d31f1c983194", "value": "T1E2B2D740B942C91BC4C55172BB8F51EDBB16532CE3FB3302DE265FC926AFAA647798", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "1742f7d7-b480-45af-a8ed-7e2c68c13ac3", "value": "384:9hd0HGG+AKZRVJeFUBh21bVPBDvdKxIEcxZY6oc6BEiOWDUiGdFx4e0Tb:9hqHGG+TZfJeFy21bVP22BJoRbOWRFv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818882, "uuid": "8214a7ec-a059-4610-a2ee-bfd8ec2034aa", "value": 23536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "2f8168a7-7e84-414e-989f-75a6e5b2f793", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b124efb9-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "96176f51-435e-46c4-bcd6-abef1818bec8", "comment": "Malware payload (Mirai)", "value": "aee1b68078b601ad580484083d6b6a3c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "68b607db-10e8-4761-a1d3-c6cbd28251e6", "comment": "Malware payload (Mirai)", "value": "296f42a79501db9f6a058f51bd851c307be3ed545af3099296e3ebdb853e54ba", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "3e25a103-ac98-4b04-9493-58e1c457bb8f", "value": "T1A9B207B2F446DEB8F40FE33E855B4805B272F75102967A31B7332E37987928464B6E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "1b04d29f-fcdb-4e51-a2e7-2965dabb08dd", "value": "384:J4ID1H9pw23lKD1cM3Kvbei9WLjToh0xsp1XIq8HAxQtB:J4I5Dt9vbei9WsixsPXIq8qQB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818882, "uuid": "9474b608-6988-4c41-a510-0c199ffaa170", "value": 23948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "3421599b-c2b7-4a08-9442-e150c311eb96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b12b87e6-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772818882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "b7655c3b-bdbd-47a0-902b-4fd2a56d72ad", "comment": "Malware payload (Gafgyt)", "value": "801e0812d1e3d4242a92e89c938892cc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "a3d7391a-373d-41e8-87e4-928f6d2c577e", "comment": "Malware payload (Gafgyt)", "value": "2d45e9558705c9a7e6ced29e5989a8958b9c689874169cd879d0170485d36c06", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "9186aee7-f9b0-47d0-b1a3-124189bc229e", "value": "T17FA24C928CA40E14E65D7AF0B1214F367723FA68DB072FBA1A1745549093E8CFA583", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "075b8131-bbd5-4375-8efd-47ee9a5d17d6", "value": "384:6SYHWhYQ5gmwHuOUM5lXg73+EU3sUmIqog+R/xqBHImFsEe:6S8KYQ5RwOSSLpUeog+RxU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818882, "uuid": "2dba5790-3248-42e4-9f17-b1ea571ae97d", "value": 21480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "35784c97-17b4-424d-b1ab-d47446733ce0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b12f30dc-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "e0d3b424-f608-4446-bfe8-e1be8cbc535f", "comment": "Malware payload (Mirai)", "value": "6ccbd83abef838fb4d3789beea7712a1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "d90aa65e-38da-4bcb-8db9-c3a3c90d6924", "comment": "Malware payload (Mirai)", "value": "cff577fe1c3b2793b27b7bb061af86db8cff1e839e9303ff5c51ef337470248d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "3e554a3f-41cb-4281-a7c5-191c177ac801", "value": "T119D2A14E2D229FECF62C85328F778E20A7A123D623E1D684E75DC9005F6120E556FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "620dcfec-d1aa-4261-9e38-7ea949392ed8", "value": "384:iZ3TRKbP7GJbpL4Xud+sviqWcM4r6RTJ8LGHjk9a8Od24KYwUyP2DSxDcx6N2ADk:SsjYbOQtiq1MyGD4VEbjxyDFS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818882, "uuid": "ab9ab225-c3f7-482d-b781-8240276e1891", "value": 28968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "5043abd9-1ed8-4900-859c-4ed4b88fec03", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1341f45-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "3f2da04d-276e-4c3c-98ef-7547494cf1e0", "comment": "Malware payload (Mirai)", "value": "88b3cdc3efc403c8f105995f669db0b6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "81095f73-5bd6-4e2f-ae71-9a74840aaccd", "comment": "Malware payload (Mirai)", "value": "0b3ff46c98980133f02a8a4d3c1d675451f308e03a665b866bb4968e000275ab", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "4550ab6c-d96f-424e-aae8-00642a2fd7e0", "value": "T135C31859F882AB12D4C625BAFF4E419933131B6CE3EA7212DE204B3533CAA5B0F775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "d4804d00-794c-46cc-8c7c-c1d2ddd1db02", "value": "1536:eEnSyBSVGcCk/b2Po7XxYaTfaIQOpN3ygB0ylDRi/N8KmW+3ZZqvfki9CWe7PT:4rCkx7XxvTfa3OpN74N8KmW+3Zgv8es", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818882, "uuid": "400d453c-8154-4e93-ab16-c70d1d2f7931", "value": 118348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "94b0f3bc-4d4d-45f2-a01e-a8cee84e1586", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b137ed3b-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818882, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "91e6a970-c791-4f62-8585-9c03ab870bc5", "comment": "Malware payload (Mirai)", "value": "e91810d741dfaddfa5a4f428b51d79ca", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "26247f33-4f58-4248-a793-d41dd5965f39", "comment": "Malware payload (Mirai)", "value": "d749723ff700a54473b2701b29d9b940c64152598885e453c811317dd7181379", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "ddd1aaa0-db32-43b4-879a-b1dd489f6195", "value": "T1F4737D63DDAA2D14C64485B470B4CEB62BB3A6A4418B2FFA3255C77C8053A8DF5463", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "d2aa3330-4c72-48c9-acf1-d364960f971c", "value": "1536:Y/UEWW9Ai0r1D5O3sOZ++Ak5FY9zEhJKK2baZ7vPLCVeCedIP+hFkxCWe7u:Y/UEWW9Aim1D5Oc2b1DYNEh2G7LCVerg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818882, "uuid": "ac4b5b41-7f28-445d-9497-a59d508c470d", "value": 80388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818882, "uuid": "d92a6f5d-0989-4319-9ac9-ac310e42f8ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b15a231b-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "700e428b-02c6-4a93-825c-4753a837b54d", "comment": "Malware payload (Mirai)", "value": "d48a6a6a486f1772e4bb79e0cc3967af", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "3f165a20-6171-4217-b587-79e45d80cb22", "comment": "Malware payload (Mirai)", "value": "00acbcb5360b8614e6109b9b75d7ff88faef746a50144bb0ab1c30b9f25d091a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "57364888-851e-4df2-a301-8a312d6905eb", "value": "T1CE258D5AF2B371BDC057C030439BD7A16935F47851322D7B62C4AA353EA2E701B2AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "a8bef675-783b-40c9-bd67-7961d7c90367", "value": "24576:3aQyxk5Ns2zQow3GLFMK47zqyc+ItU2xx:qQyYN7zQoYGLFMK2+0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818883, "uuid": "a22a6853-b0a9-4154-8104-8cb2b5e13b5b", "value": 1032192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "bb8ea271-a601-40aa-ba47-88f9ef6295cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b160f93a-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "48780dec-a51a-4e39-94f2-682817f994f4", "comment": "Malware payload (Mirai)", "value": "e8baa24905f72d517d6086e9004347f4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "2cad8bfd-444d-48ea-98c6-76ede00b6922", "comment": "Malware payload (Mirai)", "value": "e13877c33eb3d5cf94b669d967a72851a0bfe7c41e617b61c59c9ab73cb2c248", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "d59bcc9a-cf19-40d8-98d1-998923ce5b91", "value": "T100144B53A8755FB7C199AEB965B35A310717E8154B4B0F8AB13AEAF4020F8CDF40E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "18ba8e49-5cce-463f-9b38-f9b1ace9883d", "value": "6144:jwhbHH0k3M5/l8n1w5HBaf6EvZoooD+SH+hI9bymu6:Mxn0k85/y1aLEvZoooD+SH+hI9bymu6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818883, "uuid": "7548beed-c13b-441a-b480-185d3d3336ff", "value": 196926, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "defa322d-1bec-4f71-8a78-d4bbe5127e52", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b162a583-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "7fd4b9c9-2b18-4b26-ae48-7321481d8adb", "comment": "Malware payload (Mirai)", "value": "270bdf157a4cecc0496fab640db32717", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "ca0a098b-6017-42a4-9129-9885cc006d57", "comment": "Malware payload (Mirai)", "value": "ef7e94444375782ae50177894afe504b0e3ae958e64110429e50331a92ed5b1b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "63c98388-5ced-41b0-9ecc-a4e2cf8c3faa", "value": "T1F8A34A23BE328C3BC4C1653A31E75326E9F643DA51B8951EBD700E8C7B79610361B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "7b72c450-d8b9-4a71-a62b-63f00760a27a", "value": "1536:GnwIqqN+B6nK0FB8niwbiQIz4rUt10o75ougzyKtkGe75s8:GwI5BWiXZj0oV37s8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818883, "uuid": "a2bdf0c9-3fb5-467f-9e77-c5bfcd90bd1c", "value": 99684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "1de3c806-b4fd-4b8b-b7a7-12717b4384c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b17e2faa-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "ab7414c5-0ae0-458c-b7b2-3584721b7e76", "comment": "Malware payload (Mirai)", "value": "d8a3898b3e7b41ee2523791faa329a7e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "258b4118-fb62-4894-9f2d-112c1bd34fcf", "comment": "Malware payload (Mirai)", "value": "8be8b1d15d2a9bf1117ba9bcf99796b404807e111168f7b001607e88bff95c31", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "75188b95-2ec9-4b38-8df4-027163c3d1b1", "value": "T11503F646BA828E16C0D51575FE0E218DB713473CE3EE6322DE246BA9278F5B70B39C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "53a5bc0d-251d-4e86-afe9-16b7a44eb0a9", "value": "768:k9nhLHEDcotRh16nVy0KQ+VDQma5IIEVgIiI6b0B3qaR3rVPHdd:k9nhLotRhQnV5cVBjISiI6oB3qa7d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818883, "uuid": "4c21b7be-afc3-4691-ac53-87c2bda4dfe2", "value": 38176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "c6d867f4-8063-4e0a-95f5-b707b62fd11e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1872e4d-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "f3e3a55c-1762-4b1c-85cc-ed5c06e368a4", "comment": "Malware payload (Mirai)", "value": "5afcef057fe3b5fb199ffbed2ea25bef", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "4bb7d9fc-b30d-4e49-9e58-8778d4ac55f1", "comment": "Malware payload (Mirai)", "value": "91d59508c12a508cefe48a058ae04dc666f9444ca2369f5c5e6d5bc0ac22c514", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "a84def7a-77f5-4405-ab7a-c26863d00807", "value": "T161737DC7E743EEF6ED720031802BE7365272DA791024D68BD7B499369C26904F61B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "5c55f3ff-df8a-4f2c-af83-8503093ce759", "value": "1536:AtvDnFJFKUKluQuGoS4a7yUSHWaJbunandHQILVHLgcUWeduy:kvDnBOluQkSly/jbgqikPNy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818883, "uuid": "cc9d7d9d-493a-4e26-8e2d-aa3dd2e92ccc", "value": 78952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "511003f9-b94f-47ec-8473-b45a0109314d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b18ca095-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "7df55edc-fc5c-4ff4-9a61-369a1ec0f703", "comment": "Malware payload (Mirai)", "value": "ac07fea70ac5182f091c822877ce7f30", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "0c74f9b7-191c-43fb-a60e-8e34702de1c0", "comment": "Malware payload (Mirai)", "value": "3b9a075cfeac91b279daf407fe49f03741750f7d39dac7a09ad9457c87621071", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "957c79a3-8e53-406a-8042-0abdd90d039c", "value": "T1E1936C02B30D0B57E2571FB0293F27D9839ED6D052F0A58A261F9F8593B1B322947E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "bb95f6c7-9fb0-40ec-b043-49ff081acc29", "value": "1536:F6sZZv4PQnIBppBpQCgayBhuhAXRye1qVdW5ipjEpcUgm/KbaAy8TWe7hb:xEQIBppBD2huyRt2d/pj/UAm6b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818883, "uuid": "5d0a86e5-341d-4bc8-b68b-bcfa9e9c6a82", "value": 93032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "f5288be7-1926-4630-b84d-ad40f5fe1045", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b19fc208-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "dafdbeb9-7cc8-4c84-a3a2-92da4dc877e1", "comment": "Malware payload (Mirai)", "value": "8ce572175b5c0d682d1087d5500b6158", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "97535314-ac8b-476b-b48d-3889ef070698", "comment": "Malware payload (Mirai)", "value": "bcdf187e31b84706449b463894f9808fa7cedb6f8811234335c2797dcac150cf", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "1b9b8493-2912-4355-857a-092c7e0885f9", "value": "T164243B03771D0A87D09B2EF03AF723F183ABE91116A66240F61EFD845373AB1A559F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "eb6fea52-b712-4cbe-b436-e8490653035d", "value": "6144:uyoeyo2Mp0xwlBlqprjIna9wv6Oooc+Scoha9byTKC:CejMrYa9wv6Oooc+Scoha9byTKC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818883, "uuid": "879bb374-9ef4-4c90-b8cc-1a84fe9f6e99", "value": 213216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "e38aeb92-fcbd-4adf-8c14-39c01e890427", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1ae4f39-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "56782417-1c4f-408a-a8a3-70c4b72146c5", "comment": "Malware payload (Mirai)", "value": "a20fd71a5513d3d483ac6774279ce45d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "2f4c30b7-67eb-468e-b792-59ba5df55091", "comment": "Malware payload (Mirai)", "value": "121bf02f4fc60863bfb6dc9134de7a136c661db132d1500459ad9c63f50d988e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "ff26f678-dffb-47ec-b242-87ca7ed17244", "value": "T132558E5AB2B370BDC057C030939BDB62A835F47505322E7B65C4DA352EA2EB01B19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "0b098a12-496f-410e-8ac6-2bc3ad7385fb", "value": "24576:XNvo4+Av5Th+VKhWxVZuXacdW0vY3+D/WcBlF8KWA8kMX:XZo4rv5Th+whWPZuKcdBYubVWKWTX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818883, "uuid": "ab1ea52c-341e-4210-8024-143053e20a5c", "value": 1343888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "a0448400-2d5c-4162-b5dd-6e875c32f978", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1af9df4-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "8f5e9fd8-9edf-4421-88ee-3b965358507a", "comment": "Malware payload (Mirai)", "value": "0e7c948d3bb8a04e6ffaae4518d31d6b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "11dd3489-872e-4649-9b91-97999a413aa1", "comment": "Malware payload (Mirai)", "value": "950f9c24339f06a8bed22d2e8d522d59f25ed23554f14c6d4481ce8890b215fd", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "2c7f18f3-4905-44c9-bc7f-fe378c76cde6", "value": "T17B54962A7E21AF7FF26887310BF38B70879921C636E19746F26CD7181E6028D585F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "7b2142ec-d0a8-41c3-974d-e1c38e953399", "value": "6144:lHt5qI+SZ59xzFjbDkJsdcMWCxvmsFekuJ+gAfVlruXb:lHtcI/Z5fzFx1xvmsFekuJ+gAfVlruXb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818883, "uuid": "ad296caf-1d14-47ec-a343-f2ec103ef9af", "value": 286939, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818883, "uuid": "fbe1dd25-0404-47c7-9ce5-9f5aae8eaa73", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2f636a8-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818885, "uuid": "5cfd5e4c-ed7f-4629-9392-ff30acbd4483", "comment": "Malware payload (Mirai)", "value": "3d9b2bca978b7bf9d4c89305f9a43fa0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818885, "uuid": "18fb00dd-86cc-45c7-8013-db2e96b7078b", "comment": "Malware payload (Mirai)", "value": "953da7ca2082986e2fd411035a192603ed9190d9e9838f4ecc6dc8e63f2a7860", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818885, "uuid": "60315693-a105-403f-a25c-beddfb53859b", "value": "T1E5932A96B8819613C9C556B3FB5E429937170368D3EB3203AE348F71338E99B0E7B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818885, "uuid": "64472dd4-8746-4a25-99ca-dd50329dd441", "value": "1536:2eprTX9Qd3ieJkX4xHQh1RgnsXzjrAfT73b239bZHlKycmJWWl4OonZWe7S:h9E3QIxHQh1RgnsDjrYT7C1lXl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818885, "uuid": "49bba25e-9e04-43d0-9752-8888596f4f4b", "value": 96900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818885, "uuid": "082c3554-5143-443a-bce2-820f649493ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b873d3ba-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772818895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818895, "uuid": "0e8561e0-389d-478e-9174-09e6d8b5576a", "comment": "Malware payload", "value": "61cfead1f7edd7c46d22eee50c78e5df", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818895, "uuid": "d6ac9714-fbf0-44c3-ad38-bb07b30f3616", "comment": "Malware payload", "value": "25c275bf1f30227120f5de93afa7a4f107151eac8f205c5bfb0228f7aa40aa42", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818895, "uuid": "e50b6ff2-971e-40d3-9455-ae59f3f3093c", "value": "T125C22A74BEB74D6BC485B171B1EB8318B2F6534E28F55E2E3C621ECCEF449142212A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818895, "uuid": "05064b4e-ee4c-4055-8ec3-0350b5f484b3", "value": "384:fVGYJBJ8sJu049kJ1zjpXn8FU+f/NlhyKC4:d9J2049yz9MO+3pyj4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818895, "uuid": "0fe0a43e-5ed3-418d-8dfb-e63de07ba8d2", "value": 27160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818895, "uuid": "1fa27741-2f93-457f-bce0-c6ca9e3e1b70", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b87d4695-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818895, "uuid": "a39887dc-0016-42ab-b1e1-8d370febd521", "comment": "Malware payload (Mirai)", "value": "440246dd418fbff880c2c495d7e64826", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818895, "uuid": "2e267d6a-b968-4a71-8ef0-e5a7c64da710", "comment": "Malware payload (Mirai)", "value": "35f312ba2ebb404bfce5211f6cad35a1ed8c0c839becf5b27fbac8cbd1316242", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818895, "uuid": "8a742145-a02f-4934-989b-55c825f2a849", "value": "T137A31759F8829A02C5C515BAFE0E518D7313176CE3EE33168E348B74378A6AB0F7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818895, "uuid": "574504d3-ca7e-4af4-8c2f-36ddf1309c9f", "value": "1536:/hnqk7enkk4Xk4oN8YgIq9haEMOrgMvit28SAxrDc7ae5E2VvyWe7ya:InkzoN8Kq9haE58SAxrgee5pp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818895, "uuid": "818e7a1f-63c3-4179-8385-fbb092ee8f5d", "value": 103740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818895, "uuid": "e2db1726-f413-4e43-aee4-75dbb956df4a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b881caf6-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772818895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818895, "uuid": "cc422651-2796-4918-b234-269ed1305b0d", "comment": "Malware payload (Gafgyt)", "value": "a58b6e6957fc494eaaec12184bcb8af7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818895, "uuid": "183dc38a-5570-4c76-9bb2-a5c963e41138", "comment": "Malware payload (Gafgyt)", "value": "0480e1be9f8e591c414c82cbe8717b3a81afacca4c141d2b454e14b390332257", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818895, "uuid": "99a2a663-f850-46b1-a1c7-0b8e892263ec", "value": "T12824F901A9518B57C6D22BBFFB8E429D37365B1897DB33019E24BEB02F8578C5E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818895, "uuid": "8e9253a4-855f-4ea5-adfb-df6367db5e97", "value": "6144:qmFlJ1TX+/hlxq5oI3ntDG13r+MvjOjRbeZBV/rgUMX08C:qm91TGsn9KTvjOjRbevV/rgUMX08C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818895, "uuid": "23aa8450-958b-48d9-a799-6c873b0ea2d0", "value": 228577, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818895, "uuid": "840518c5-132d-40bd-bb50-b2c353697632", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b891c65a-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818895, "uuid": "baddcff6-6d33-460e-869d-c97061b9e16d", "comment": "Malware payload (Mirai)", "value": "c7f9014e8c2201aff052645939d921a8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818895, "uuid": "398c61e6-b662-4c37-9c78-fbb371267f50", "comment": "Malware payload (Mirai)", "value": "b1a021aa45f7043937aeb3af7c917e32c74941447d59e341958b0ed4d32d1aa2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818895, "uuid": "987e1b04-11b6-4675-8751-3952edd746aa", "value": "T1AB341901D5508B57C1D22BBABA9A425D37336F68D3DB33129E24AFB02F85B9D1E3E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818895, "uuid": "60e71f2c-acef-4909-9dcb-316585fa4690", "value": "6144:zemCWerlgXVaqhMY9E8YRSEvWm/xvcmytL+7CZmXkJHN4/:GNrl2VaqLS8YRSFqcmytL+7CsXkJHN4/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818895, "uuid": "d04da80c-b9a6-4511-987a-8d5ebb4090c3", "value": 244122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818895, "uuid": "76be6d78-2efb-48e6-926f-abdc3cedfb60", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b898dea0-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818895, "uuid": "ac83e57d-8eb5-44d7-ae3b-68673ab8f6f1", "comment": "Malware payload (Mirai)", "value": "870bc254ef586de382728aed00df5d1e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818895, "uuid": "326dfdaf-47d9-4c1a-be38-4acdbebe65c3", "comment": "Malware payload (Mirai)", "value": "d2537370a8e859756cdb2a6bb995245ff3abd63ec66c0588762cc415f0f2b88f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818895, "uuid": "8dfdb71f-3ed6-483e-af86-5776c2935791", "value": "T13D240A41E8548B57C6D22BBFF78E429D37365B1897DB33019E24AEB02F8578C6E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818895, "uuid": "9ca8bfbe-00fe-407c-bcf4-3553ac37cf3f", "value": "6144:t6mPMXTnPt0nygajMeMoln1NveOjBcTZdIWdvRBGLTC:t6NXTVTgwMeMoHNveOjBcTnIWdvRBGLG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818895, "uuid": "56fcec15-3358-4ed9-91a2-67d9fa76e1d5", "value": 220578, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818895, "uuid": "fa9b74d0-7e0c-4be8-98d6-44dcf4625507", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bda90bcb-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818903, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818903, "uuid": "2a620884-8a77-406e-b251-657489992fde", "comment": "Malware payload (Mirai)", "value": "fb42517c1da9a2c57ab86ff2fd5cc998", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818903, "uuid": "12d5259e-b9d5-4ca5-96c6-236d199daa6c", "comment": "Malware payload (Mirai)", "value": "b232ed17beeeb269b4b1cc1e224a248a12acd2bb5a95165775c775512d26e8f8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818903, "uuid": "2fba68c4-d3e1-4993-9529-06fa6f47b8f9", "value": "T12654C6067BA19EF7C89FCD3301EA861114CDE45612A92B2BB274D61CFB4B94F49D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818903, "uuid": "44ff9440-a43b-4092-8efc-97f77a9b4332", "value": "6144:pNRuvydJcM3NtnHWbHpWPgxvZsFekuJ+gAfVlruXb:Qmc8wrppxvZsFekuJ+gAfVlruXb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818903, "uuid": "453b9fbd-da1f-4789-a212-411324b0645c", "value": 287768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818903, "uuid": "1744e4ca-9f3e-44b0-a0d6-c99ea5f3ab24", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdb4b183-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818903, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818903, "uuid": "ac25a1bf-7941-47fc-b9a4-c621e07c7674", "comment": "Malware payload (Mirai)", "value": "c0c09c31405cc599ed25680fa70e8a1e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818903, "uuid": "08aa0adc-3b80-40a0-8bf7-b61517054873", "comment": "Malware payload (Mirai)", "value": "379d8463f451c4ef78d84e0707d98b3a8b22274089096c64b2a17d550dd1b05e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818903, "uuid": "32b903a3-04d4-4270-a613-3d4c30e63808", "value": "T173342B05E6408B57C1D23BBAFA8B425933339B58E3EB73059924AFB437C679D5E361", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818903, "uuid": "16bb2ab7-cf7c-415f-8309-46ae7b8abe8d", "value": "6144:g2v4iUqEr7ADaJorKF1jt/nb81Vx+GiTlDgM/R802m6d2yYZlege:bTEr7ADaJbF1jdA1VxrADV/32m6dZYZi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818903, "uuid": "c52747c7-7865-4091-a8a9-6caac87c4125", "value": 243059, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818903, "uuid": "92703843-deb4-4269-8645-ac4dc3478f8b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be19f7b8-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "cce5751c-9558-42af-9a2a-7ce0265f7db6", "comment": "Malware payload (Mirai)", "value": "394e9d485bb9ea3367028b7e1b39afba", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "6e14031a-ebff-40c0-b30f-fff3d4922cf6", "comment": "Malware payload (Mirai)", "value": "0ca850adf73b299f9d3cf3edb41ceb83dc50c352f5788ae1cf7e2813ad56186d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818904, "uuid": "96c6ebea-6726-491d-a5f9-819cc2b3d02a", "value": "T136C3FA5E6F329F6DF12CC33147B78E21975813D223E1D685E2ACD6055E6038E981FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818904, "uuid": "1a0e9781-d880-418b-b57b-44fb15b03de8", "value": "1536:iWQ5Ri8+v/t5rm4RfWuQNC8RLipYJPRUx3nfylJZ74uk97H9NefxTLRo1xWe7HA/:qrNiN9fuLipKQukpH96o1zi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818904, "uuid": "3ad56896-0dd8-4841-a186-d9dbd0c3c621", "value": 118724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818904, "uuid": "163d3d4a-9e66-49a4-ae72-803c7cfd3866", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be280430-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "d5eeadcb-326a-4a15-bcde-2b1bbec6761f", "comment": "Malware payload (Mirai)", "value": "11bdbe144af165893691c7c2eb4167c9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "7c670a66-5260-473c-a568-6a44a56e9ba8", "comment": "Malware payload (Mirai)", "value": "2f8c0b7c42ba3387afaaf6d1dccb749d5a23065e2d239213dd30b1ddd77e14ab", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818904, "uuid": "1e763723-d3ca-4f31-ba43-0eb39ab327be", "value": "T1C7242A93F905DEF7F40EA77604D30B257232FB610A531A32B21779699E3A2C4246BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818904, "uuid": "f640cc8e-d961-4c85-83da-34c1a3ea93b5", "value": "6144:coiP/vwnyxRXh7VJu8upxLQCeZe4NWevDOjFc+Sctha9byTuC:SPwkumCeBvDOjFc+Sctha9byTuC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818904, "uuid": "5c68a839-0e34-418e-8b38-1ba0af562fe0", "value": 229748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818904, "uuid": "23e5d232-146c-4f8c-87a4-07385df50d66", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be56ace3-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "35454979-e3a4-40d9-b682-fa40329c161a", "comment": "Malware payload (Mirai)", "value": "37f0da2a0ebfd71464168b6bf677c344", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "626f9a49-4808-4055-81ea-7f6090534cac", "comment": "Malware payload (Mirai)", "value": "0efc7793506a58ac8f6e14771e7f333f27bf4ba910369d828c378cdae6cce201", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818904, "uuid": "afa0fc1b-8d38-4042-8ef0-df621838d28d", "value": "T116C31A09AFA21EE7D46FCD3702AD0B0634DC5B4612B9BB3A7274C928F55958B0BD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818904, "uuid": "fc04afdd-c24c-4ef4-bba4-8d04901ce8f9", "value": "1536:m6cc1JkfWV4+FwmW/7emzjRx1EUEuZm5xHaCZDptatlZP8YUVJT2gWe7g:pVIfWhamW/TRfExuKpsPUC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818904, "uuid": "4ee47986-5983-443d-806d-77a7f6b58aff", "value": 118884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818904, "uuid": "7fc8a997-8d05-4d1e-b6ee-1ba4689d55dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be8c56bb-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818905, "uuid": "cc9840a3-bfc0-448f-b26c-7866f49ee9dd", "comment": "Malware payload (Mirai)", "value": "8bfc6881a1ea4cfdf6008e1b0736ec8a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818905, "uuid": "25784523-31aa-4462-90c8-1a8f0eb5c739", "comment": "Malware payload (Mirai)", "value": "89d2cf74a5deb6dbf61e1410b6b9ad2672ab6fcd9851b984d8c0af39a8fa491b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818905, "uuid": "ee38892d-bba3-46c5-9443-c25169860099", "value": "T161A34AD7F800DDBAF41AC73B44975906B230E7A10E8217B67353796BEC391E91827E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818905, "uuid": "88f39c13-765e-4409-90c9-54f5db39eac3", "value": "3072:ZgFlfGbGNyb7IFQn+F6lB7XsnnicydZwPJ:ZUlfK3UQ+FKhuicydsJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818905, "uuid": "79a09529-8838-4dc0-a565-1234fa39ee70", "value": 102992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818905, "uuid": "f5a920f1-a709-456e-9eaf-c5f99d268117", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfcffb21-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772818907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818907, "uuid": "f6a6538b-498a-4931-a816-d1bc67131c22", "comment": "Malware payload", "value": "37175639049fa8a62bf3b61051bc96d8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818907, "uuid": "85f3e4f2-771e-40cf-a19d-747be7a9e856", "comment": "Malware payload", "value": "b199922b585a0d0042f3295f57fd7a97af1dbb773508e5eab86378ae997eff38", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818907, "uuid": "a9daab05-31e0-4108-be0e-d640218eb29f", "value": "T172B65C06BCC42BBAC46C4A7484FACA5522B05E140AF1466A6165FFEDBC772797F078", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818907, "uuid": "b4a085ab-5d5a-4047-846a-f55ed5640091", "value": "98304:lTCDV/MOEs8ru7vMoKQWmDeat2jkmhk7cIGCX4Zcxs:JCxMrsiwvMo7DeJjDhazJX4Zd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818907, "uuid": "220e36c5-0288-4b7a-9fe0-552414486cea", "value": 10897533, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818907, "uuid": "e34f9e1b-4609-46ab-a266-d94c2d7a06d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0fb583d-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772818909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818909, "uuid": "7699fdff-10da-4a68-b39c-8eca5e003915", "comment": "Malware payload (Mirai)", "value": "7691ec1ca0ce85fc67e94866ab339883", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818909, "uuid": "ab287e12-e1d6-464a-b788-103da531832d", "comment": "Malware payload (Mirai)", "value": "b0cb45af42d30aa8582a1d1d51529c8134cdd463593d889b9d82376b89319504", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818909, "uuid": "de6ba320-8526-4809-a185-56e1addb943d", "value": "T135B2D680B946C917C4C55172BB8E61ECBB16532CE3FB3303DA264FC9279FAA647799", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818909, "uuid": "76ac0849-8a23-41bb-a80b-b19075e72793", "value": "384:0fRofuCgAOl4X8ThV1bVPODBxSw1mvtfyEa4oY6Bk+M6uJ1Fx4e4u:0f6fuCgPl4XEV1bVP2RLmoN/M6XE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818909, "uuid": "0a2a84fa-d611-411a-9908-6c777e4168d2", "value": 23520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818909, "uuid": "521e17c2-4dc0-4789-a79e-b02f16afd6f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1099ae5-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772818909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818909, "uuid": "2dddb1e7-7b02-45ee-8444-f2ab6e78cd92", "comment": "Malware payload", "value": "783268eeb0f8ee7a64691b8cde6bb53d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818909, "uuid": "42629c28-733a-4824-a404-8ef26326d4bc", "comment": "Malware payload", "value": "869c4b03c1c6cbf686804b3dbef55240122de0075ab21850f6d9d4cf3b44a240", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818909, "uuid": "a363f94e-c559-46fb-af9d-9b266540c390", "value": "T18D923A81E943D9F4E81242B11436EF6BF530E27D1048EA46D37B56B2A493940C6BB7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818909, "uuid": "cd16a9a6-2615-452b-951b-84e524f5efa2", "value": "384:fVTuQw50VoldMrHtRpQjc1p9DQel1HF8r3yVF:MQw50olWLajcFQelRF8LyVF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772818909, "uuid": "754262f5-8c10-4b82-ac8f-6730951640c7", "value": 19952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818909, "uuid": "fcd2cc38-a251-4a61-b3ae-e5c7b6eca7a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f86ae1c1-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772819002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819002, "uuid": "4de9325d-8ec2-49e7-8561-821dfa33f7cc", "comment": "Malware payload", "value": "2bc899ad2c68594b7d068d4af185db5d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819002, "uuid": "51d2541d-4e70-4ceb-8c26-2df80513e71a", "comment": "Malware payload", "value": "15e982a32165a377160260aceaac808131ac01be9f6588fe0f60038fefd64b90", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819002, "uuid": "af03d1b3-e360-4d97-92ae-53075a516100", "value": "T121231745F9819F15D4D525BAFF4F21897353472CE3FE7202DE210BA9278EA6B0B7A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819002, "uuid": "d8033aa3-3d1b-47e7-b8e8-1338ca24889c", "value": "768:BFnxZD2Dbxyyh1vnVZYLECjzEQZIIdzKRKluJiIdRYZv6v0RtTHgGAMe9:BFnxIxyyhtnV2xjzEGIIARKlMi6OEWAJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772819002, "uuid": "aac646e5-7a5e-4754-b263-a5fd6b0dbc79", "value": 49096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819002, "uuid": "e1929d2e-e40d-4256-a04d-88cbebf0a868", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f88a085d-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772819002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819002, "uuid": "f01e26b4-e7ae-4eca-9d19-218f993e373f", "comment": "Malware payload", "value": "54062239612bfe1227ce93f8a030a732", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819002, "uuid": "b5c2d2ce-5486-405c-bfb4-7f2e032a5370", "comment": "Malware payload", "value": "7f9ff654238fffe330750d60d8060b55eb3ff699e3de31f2536e3d10d78ee166", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819002, "uuid": "11ab8b22-89d1-4dfc-9a3c-50a235c22174", "value": "T179513A85F35105317FF26E9675B4D404B188A0A2AFC25E25E4EC78F98A8FF0A24D1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819002, "uuid": "a13cb480-3ca1-4577-9d6e-45604544a357", "value": "24:vuOS1aIOSvOSpOSHOS4TdkaUoOS5oOSXOSSfOShOSJOS5aDg9OS6OScmOl:vuRxRvRpRHRMPR5oRXRgRhRJRgcR6Rde", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772819002, "uuid": "99b8f03c-3495-4aa1-b7c8-0a94d1403957", "value": 2583, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819002, "uuid": "8f47b799-815e-44bd-9e0c-82695fa5880c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7d9eda1-1984-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772819296, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819296, "uuid": "ef709934-1763-4b1d-9092-4e86ca68b46f", "comment": "Malware payload", "value": "59b11a791347868d6b1f607d79e9b79b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819296, "uuid": "128b1f1d-b62e-4732-8e81-f964ec2dcbc4", "comment": "Malware payload", "value": "cc2e73eb93ec7a76c007d078f328e0a2c817f231f9d1e35b647c9c371d3cbc98", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819296, "uuid": "b8c81a58-f3ab-41c9-8e3d-c86887120555", "value": "T16BE37D17EA8540FED0FAC170478FA237BB22B8896125375E26A42F613D36F60675DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819296, "uuid": "ac614ea1-6cc0-42f6-bf88-7e2ddb350190", "value": "1536:dZvw2UNkIAmCpjUuSciCFtu/UqZ+84Wsf1N+jYFGnIpIawX4egkdw95CSMdLdzuy:cNkI3LC7u/iVWsfHDknIpIawIl1YddY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772819296, "uuid": "3b68aa36-c429-44fe-a4c1-d476103a2a4b", "value": 145608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819296, "uuid": "d0fb7298-ca63-4252-95fe-268306ad8fef", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa15afbf-1984-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772819300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819300, "uuid": "0554bddc-27a0-49a1-86c7-0202adb87dce", "comment": "Malware payload (Mirai)", "value": "56d3f28f8f887eccf2ba26678423ee86", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819300, "uuid": "00a262e2-83c2-411f-97ac-ef33192588a2", "comment": "Malware payload (Mirai)", "value": "e0f508a9feff1e80ff985b78751921c2cb1608589c4800ad7e417719622687f2", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819300, "uuid": "21faf864-cf3d-40d2-ba46-98625c9d64f5", "value": "T1D32633040AA7C7EAAD835236A08E9375CC5F8F2FF85D0A1C8EE574448C07959A1E79", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819300, "uuid": "d011e88f-364b-49fb-a698-d3938aefb36d", "value": "98304:BfcBc5afb5dn/ZWfb3SGRRdeQUx+0WnOyyoiyWYl+7YIm:BiDnYSGRRgf5Yy9yzKs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772819300, "uuid": "c78b700a-30e6-4476-b7ad-e95926d53f49", "value": 4475288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819300, "uuid": "f096b27e-d74e-493b-a966-c21a097091f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa1adda8-1984-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772819300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819300, "uuid": "c55d152e-3d7e-47cd-a07c-fa01df6328b1", "comment": "Malware payload (Mirai)", "value": "d451bf60a6b1ac4cbb6cde6e15f7f9ba", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819300, "uuid": "8b45626c-3551-4e96-b6d1-80eab46e19fe", "comment": "Malware payload (Mirai)", "value": "e7051358dc65057352b0f6df5fcf4214b37fc9f561374a55e79fb4ccfd902bbc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819300, "uuid": "48284907-3945-4f3e-bc2a-e8788a8d78f8", "value": "T1351633B417E2AE57C0FDC34947B18E947A836F8D7ABAD2533192E170DCE1A09B1520", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819300, "uuid": "634e9f09-4f19-476f-aac4-74a2bf78254d", "value": "98304:H36ysIptgmiDVu22UBIkIDifvpwJS/pHz7+8bq3aIUk62hcI712TH5qFNWW4j:H3zsMipuerI4wefaasf12TH5qFNWW4j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772819300, "uuid": "313a1ab9-ec26-4750-86f9-0e4cb5b6a46c", "value": 4184816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819300, "uuid": "8a7a9e82-c42f-41e9-9127-d34d6222494d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa2499fa-1984-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772819300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819300, "uuid": "02f11a95-9571-41c9-98b4-14baef5a8cb1", "comment": "Malware payload (Mirai)", "value": "931d0a44b856ea6a31966e3bc0511c75", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819300, "uuid": "3917abbf-6be4-47c6-a7ed-3ca022291b78", "comment": "Malware payload (Mirai)", "value": "d457de2b246a9ec46a7e3ab21bb0471ae1de82eab1e21aa10cd972a8e0826405", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819300, "uuid": "93ee30c3-f50b-42b7-8796-f6ac231b4a65", "value": "T1031633E803D53ABFCC86BAB2577129E4751E540BA78E994DA78544E3234E2C87E35C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819300, "uuid": "7d8b575f-1fab-4139-8f40-80bb573f3f0e", "value": "98304:kWLcgwETf1EJIceYbf7RnzCdvejJpRg0uZCBr4vRg9b0l0:kWwe6X7RuiaGBr4vR3+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772819300, "uuid": "d34db142-f5d3-4449-a99c-a5f78a577e64", "value": 4018908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819300, "uuid": "e5abaf0f-b9a5-4551-8b5c-6668004b107b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa311841-1984-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772819300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819300, "uuid": "c23a5012-ae8a-4ecb-84df-18494e2c1e0c", "comment": "Malware payload (Mirai)", "value": "4756faed68b604d469d52738eb35359c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819300, "uuid": "e81cc4ac-f9da-4731-9aa8-5eba3c0aa7d6", "comment": "Malware payload (Mirai)", "value": "14aa037691e7e19eb4d8c7857578e3fad0966c136fe803f6c1f108f1a63491b8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819300, "uuid": "3f98fa5f-8993-4dd6-9ec9-8be44e677461", "value": "T1681633CDE97834A907F9C0AD375A92149F3E3683445B7EB87FF9709BC50865A2402C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819300, "uuid": "87bbcbc5-716e-4723-afc0-14a9c792b908", "value": "98304:ellxtvA8fr3veVvExF3JSBpW7zxVkTlV7vOvyqRKLjcK:ejXY8fr3veCxxJSBpW3xVmlwrgUK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772819300, "uuid": "03ec39e7-44f3-4399-a8ea-905ee97d8f5e", "value": 4170428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819300, "uuid": "0ba5954f-ff79-4b78-b932-6538b1873d42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa33cfcf-1984-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772819300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819300, "uuid": "a8acec86-4f53-4179-9b54-6e0521a1c696", "comment": "Malware payload (Mirai)", "value": "bf7165c604bc7164a97bbbb7a34ae7f5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819300, "uuid": "75a3219c-d313-419b-a430-646920bc8c4a", "comment": "Malware payload (Mirai)", "value": "b7db4a9d8eefbc5cd91d9e3a79ece553321978cc26f3260385e513fdeda85473", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819300, "uuid": "88c3b16c-c1ce-4b41-a8d0-dfc6373b9f21", "value": "T13226337F999C8B1323A03A73FC5B5C0D47B9253318653F64612A8ED310E8A691F5DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819300, "uuid": "39430bd9-5fcb-473c-858c-2710c3b2a709", "value": "98304:VDQck0PDbFv5mH8of6U6i4k4fqov8VDlfuTso3mQwz/w:RpFv8coSMsCov8TuAo3mQwz4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772819300, "uuid": "8bf971dd-5765-4389-8b9f-883a59daccd2", "value": 4505308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819300, "uuid": "b535e37f-42ed-4db0-b89a-90aebd1db5fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa765a7b-1984-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772819301, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819301, "uuid": "f8b0b5d7-0203-47aa-b12b-af9153b96412", "comment": "Malware payload (Mirai)", "value": "d65331498987713c6d3296c64c06ed0a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819301, "uuid": "a47dff87-3841-4c87-be4c-5e8f6c57035e", "comment": "Malware payload (Mirai)", "value": "e132e4577ae244b7d62c96dcd13bbc3c13cb907ccff763b01ad6d0227a07f2ca", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819301, "uuid": "aa5f63c6-db50-4f28-9b3e-2b460fb555fb", "value": "T1AC967C47B8924952C5E42637BCBE81C433634EB98BC7566A6D14FE387ABF1D90E393", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819301, "uuid": "c560fe22-84a8-4642-82ea-376e97e6cf37", "value": "98304:t3fHHIoUcUvTc1cFVZrER6pV48WdJLLwNXgxm838y:t3goUcUvTc2FVOR6ArTLsNQsI3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772819301, "uuid": "1e698d6e-69c2-4b96-ae56-4567283ed9de", "value": 9398002, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819301, "uuid": "6ac90c71-7ad2-47a2-a954-0ed19aed17c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbd29cc1-1984-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772819357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819357, "uuid": "c6060abb-c4ed-4f73-a516-91cbaa32761b", "comment": "Malware payload", "value": "1dce663ce3b420e25d6de86102388c57", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819357, "uuid": "43c63464-f658-4f56-8585-211f13155814", "comment": "Malware payload", "value": "618975cfc8db362cb387777103e9721a2e809f301cf8308eb4ec39d80e3fcc03", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819357, "uuid": "040ba809-44bb-4eb9-968f-3873a5bc522c", "value": "T14B1198CD3505495EC976EF387F6187B29248E2C7B8C0173569D8AC27186463878AF9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819357, "uuid": "227b5aa7-579f-4676-96e5-ce0bd3a9d85b", "value": "24:tdo6oOo3oOomoFoaoK8o7ocQq7yFxdhIqr:zbFMZLy/YYbfOFxnr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772819357, "uuid": "00b5fc8d-01c8-4e14-9a18-621256325f76", "value": 921, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819357, "uuid": "4b6ba4ee-64b8-424e-95fc-f1cb770daf0f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbe19f7f-1984-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772819357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819357, "uuid": "12bd587b-b106-43c9-a78d-52490aa73ebb", "comment": "Malware payload", "value": "aa49d88d6deac1764084d86652eb0198", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819357, "uuid": "19361e94-7ff6-4491-bde9-5505c8b8f4a9", "comment": "Malware payload", "value": "a6ebce366a78e7c015ffbf5d9c5e2b4cbc74657d216669cfcba38c9e2960f601", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819357, "uuid": "3e88d9f0-3075-4201-b7f5-787d0ba7bcc8", "value": "T178E012C87001E282965FDA8B61F7EA44E04396E7A2C97F43DE54BD31C456418B9AEA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819357, "uuid": "b63c31e7-d2d6-47f3-a3db-20fcc874d5e2", "value": "6:LMFwCriSAS5xKDMFw0Li0D1ASNKDMFwOiiOgAe3t:orvpGg1L7D1p8geGl9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772819357, "uuid": "0aadc743-1351-4dd7-bd90-1c41214bb0c6", "value": 360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819357, "uuid": "d0b7a276-6ead-49e9-963a-340ff2b90897", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cca22247-1984-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772819358, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819358, "uuid": "37ec068b-de9b-4994-a0ca-bea7724575de", "comment": "Malware payload", "value": "12f8ffd83a1f4be008f640b46f119625", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819358, "uuid": "819f662a-f476-4ae8-b23b-3df4bbd0eec7", "comment": "Malware payload", "value": "254d43c932647cea4d9ae0979ee9c20d59361b07f3defdadf4bf9caa9f2f9c69", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819358, "uuid": "e77329e1-818d-4682-b7de-8b483bee212b", "value": "T1C80197077123A2B0570F00318B8BB1E0B11A391FA4118E2C3E89A5387F22489BAF66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819358, "uuid": "0d0951be-e297-4b62-b7e6-09977a233f21", "value": "12:AzCtih/3HMl2RHj9OEww6smNbBzNRB1fbdDkzlMUm9SksuIq1+jrMyms8Magzq83:AzCtipM+dwDtzbDRkzlM+kNIq1+rms8u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772819358, "uuid": "75bbb325-3a03-464f-a56e-a41053980ae6", "value": 724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819358, "uuid": "52f4aad9-f5a7-45b4-8862-956b90263db1", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91b5b27b-1987-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772820548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772820548, "uuid": "2a5b1a98-678f-4589-a6ec-70684d0f6b01", "comment": "Malware payload", "value": "f828f29febe7f22ae630e50aaf23ce5a", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772820548, "uuid": "c180853b-c2e5-4a4f-b620-23d65f0bef41", "comment": "Malware payload", "value": "3c63aa190a8008580443448eb6685bca9bf5b2ec3aaf8b1f07b355cc496385f8", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772820548, "uuid": "a139c0b5-41b0-4c7e-8c2c-1c6aba70f422", "value": "T1884509126ADC28A9F5B72734EA76616B26347D2D8F11C4EF70543B8E5472BC0CEB17", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772820548, "uuid": "587f89db-0ae8-4e2a-aba8-b31d2c036ea6", "value": "5806f995faef2f2c9a26843c97e4e628", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772820548, "uuid": "7507b539-bd78-466b-973e-91b13fa51cbc", "value": "24576:k4u6MfqXTNTulUxgNRuZqykUFSYqAxaTbjd5qGUEe99f:k4u6qqXTNTulUgNLZd5he99", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772820548, "uuid": "3c2d9469-aba0-4ba5-8ea3-32f71d25c59d", "value": 1230336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772820548, "uuid": "026f9a71-d826-4a8e-a546-b8df2be8893f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aaeedf7b-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772826567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772826567, "uuid": "1a259b64-38c0-4177-9bcc-e6b49494b2cb", "comment": "Malware payload", "value": "534eeb3d381eed654e9670ad363805ea", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hjamie", "colour": "#0c8ce8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772826567, "uuid": "e7a84937-f76f-4ec2-9730-6c298c244125", "comment": "Malware payload", "value": "dc6a50c49bf7620593656bd8d3866566bd6410f663fed6f082848e18974621fa", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hjamie", "colour": "#0c8ce8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772826567, "uuid": "24d7ca27-4028-40fc-8747-0ad6a0601db7", "value": "3D4302C7D96A873DF8B6C9BC4E96C8444987012D7143B0AF458CA5BC38797951E8AF0F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772826567, "uuid": "08386c7a-3039-4531-b4a5-505e16dfb9b3", "value": "1536:m3LqE6rUQWzVQR7iAGEcUT5PIi7pLqBNs4LOjcwf4nO:mOE6PWo1T5bz4LVO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772826567, "uuid": "6a49ae48-0029-4358-9d63-a996b1f80847", "value": 56472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff48fc2f-199f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772831039, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772831039, "uuid": "c045d78b-6197-4c11-8efe-1f73360a718e", "comment": "Malware payload (Mirai)", "value": "3a3e10ed339fac1250cd80076485b592", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772831039, "uuid": "e746dc5e-5bef-4bd9-90aa-fe38ade347a4", "comment": "Malware payload (Mirai)", "value": "b5ed6f13acd8271d9ec55eea3386b1e63163a425ee221011644fc289dab7f944", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772831039, "uuid": "b56c3bd6-9427-474e-beca-51c4a230d292", "value": "T1DFA3F832E643C6B3C44306F101A7EA6B0D21BE67093A9A89E32D7CB4AF334C67555F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772831039, "uuid": "39333814-502c-4648-991e-cdb1b65ee9da", "value": "3072:gxh3bYcTa9RPls9xwut8zIU9mmFVcqIRGnDFT:gfUcOqXt8zIU9mmFVcqIRGnDFT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772831039, "uuid": "d1a4cf32-0a6e-4a60-b2a0-174039d7c361", "value": 104252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772831039, "uuid": "0eaf4965-4fa9-4906-8e1c-b899a46093c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772832503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772832503, "uuid": "380b9896-f363-4c24-ba7e-7baf74e16cf5", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772832503, "uuid": "d7f238a3-a3c9-4fb6-bfb9-f5f04b70a772", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772832503, "uuid": "3d9ad45b-3f88-4c53-9a53-d08d3b6ac2a3", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772832503, "uuid": "b169f9d0-699a-4230-8cc0-b849503f436a", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772832503, "uuid": "8e7da1ed-d58d-457a-9f3c-998691c184e4", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772755217, "uuid": "75b5dc6f-18ef-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.235.153:55382/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772755448, "uuid": "ff13db18-18ef-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://orga-sync.organiclink.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772755448, "uuid": "ff6deda8-18ef-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.104.16:35625/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772756226, "uuid": "cee46f14-18f1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://link08.organiclink.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772756240, "uuid": "d7ae7079-18f1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.208.241:56075/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772756297, "uuid": "f98c6d9b-18f1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.2.60:57359/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772756534, "uuid": "86bbef5b-18f2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.52.35:55385/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772756600, "uuid": "adee6384-18f2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.161.5:60384/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772756766, "uuid": "11258916-18f3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://aero-hub.skysentry.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772756837, "uuid": "3b68e03a-18f3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.237.253:49633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772756953, "uuid": "806949c5-18f3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.2.60:57359/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772757546, "uuid": "e2088979-18f4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sent-v7.skysentry.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772757550, "uuid": "e4045576-18f4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.235.153:55382/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772757615, "uuid": "0b2c57d2-18f5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.254.62:55868/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772757849, "uuid": "96256a1d-18f5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.52.35:55385/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772758387, "uuid": "d746307d-18f6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sky-gate.skysentry.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759168, "uuid": "a870bf0f-18f8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.177.112:48474/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759234, "uuid": "d0383fc3-18f8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.254.62:55868/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759409, "uuid": "3868f8d3-18f9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://31.57.216.121/clean", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759412, "uuid": "39fa4f17-18f9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://31.57.216.121/i686", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759412, "uuid": "39fa6788-18f9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://31.57.216.121/arm7", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759412, "uuid": "39fa6cdc-18f9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://31.57.216.121/x86_64", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759415, "uuid": "3b9983ca-18f9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://31.57.216.121/aarch64", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759526, "uuid": "7dfd6742-18f9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sent03.skysentry.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759778, "uuid": "145f180c-18fa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.92.76:35811/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759886, "uuid": "548f5f97-18fa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://logi-base.trailvantage.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759898, "uuid": "5bb2a182-18fa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.58.44/main_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772759899, "uuid": "5c24bb07-18fa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.186.54:49370/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772760494, "uuid": "bec532a5-18fb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.183.216:54318/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772760670, "uuid": "279be435-18fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vant-v8.trailvantage.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772760738, "uuid": "508d56ef-18fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.166.109:46831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772761334, "uuid": "b3784284-18fd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.92.76:35811/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772762302, "uuid": "f463021f-18ff-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.166.109:46831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772762420, "uuid": "3b3b7fb6-1900-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.183.216:54318/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772762479, "uuid": "5e0aaf1d-1900-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.49.179:52589/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772762901, "uuid": "5995de49-1901-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.99.204.180:40353/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772763381, "uuid": "77da264f-1902-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.1.45:50565/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772763502, "uuid": "bf962c46-1902-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.175.128:38295/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764640, "uuid": "65eb2908-1905-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.49.179:52589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764640, "uuid": "6631b3a5-1905-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.172.193:44948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764640, "uuid": "6650116a-1905-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.136.4.176:50423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764699, "uuid": "89404752-1905-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.168.74:37678/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764818, "uuid": "d041a13e-1905-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.175.128:38295/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772764881, "uuid": "f5b140b4-1905-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.1.45:50565/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772765243, "uuid": "cdd16abf-1906-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.199:39186/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772766093, "uuid": "c8826787-1908-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.150.202:60629/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772766618, "uuid": "010d5d7b-190a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.122.172:36095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772766738, "uuid": "48649639-190a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:33799/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772767399, "uuid": "d28b7a99-190b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.247:55555/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772767953, "uuid": "1d1f07ac-190d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.109.200.52:55661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772767998, "uuid": "38000404-190d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.254.48:52201/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772768047, "uuid": "552ed3bc-190d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://trail-net.trailvantage.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772768112, "uuid": "7b78777e-190d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.247:55555/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772768176, "uuid": "a1993eb6-190d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:33799/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772768240, "uuid": "c7c06a1c-190d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.166.54:55661/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772768359, "uuid": "0eab8063-190e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.237.153:39645/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772768413, "uuid": "2edf3b8e-190e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.0.32:51057/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772769686, "uuid": "25ea122e-1911-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.146.132:43654/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772769787, "uuid": "61cf0a36-1911-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.146.132:43654/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772770747, "uuid": "9e6c6588-1913-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vant05.trailvantage.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772770749, "uuid": "9f99d260-1913-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.229.93:57964/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772771352, "uuid": "068e5bf6-1915-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.1.34:52798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772771715, "uuid": "df2b58ba-1915-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.239.36:36176/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772771888, "uuid": "460cf49b-1916-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://hydro-run.aquastream.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772771897, "uuid": "4bdcab34-1916-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.237.153:39645/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772771950, "uuid": "6b26be17-1916-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.1.34:52798/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772772139, "uuid": "dbd312f4-1916-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.239.244:43759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772772914, "uuid": "a9938181-1918-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.34:51769/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772772971, "uuid": "cc1001f8-1918-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.251:42121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772772971, "uuid": "cc10081a-1918-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.103.207:34864/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772773098, "uuid": "17c963b5-1919-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.51.229:34208/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772773147, "uuid": "34bc816b-1919-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.103.207:34864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772773343, "uuid": "a974e991-1919-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.55.22.176:45197/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772773464, "uuid": "f1adf81e-1919-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.55.22.176:45197/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772773507, "uuid": "0b9a0ace-191a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://stre-v9.aquastream.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772773513, "uuid": "0ebed234-191a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.5.188:46066/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772773640, "uuid": "5a802eda-191a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.171.246:40751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772773697, "uuid": "7cb05940-191a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.115.167:52769/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772774111, "uuid": "732a169b-191b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.184:52274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772774230, "uuid": "ba3e1439-191b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.33.186:60716/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772774307, "uuid": "e868eb93-191b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.33.186:60716/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772774648, "uuid": "b34fc6a2-191c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.244.36.34:45514/Mozi.m", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772774648, "uuid": "b36023d6-191c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://aqua-sync.aquastream.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772774648, "uuid": "b37bd6b4-191c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip-2422.proline.net.ua:45514/Mozi.a", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772774649, "uuid": "b445f959-191c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip-2422.proline.net.ua:45514/bin.sh", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772774649, "uuid": "b44ca6ca-191c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip-2422.proline.net.ua:45514/i", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772774658, "uuid": "b91c609b-191c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip-2422.proline.net.ua:45514/Mozi.m", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772774720, "uuid": "de73384e-191c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.5.188:46066/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772774776, "uuid": "ff74f852-191c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:33806/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772774958, "uuid": "6bfaaa66-191d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.115.167:52769/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772775025, "uuid": "94314bf7-191d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.36.132:51770/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772775198, "uuid": "fb0b9930-191d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:33806/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772775377, "uuid": "6600765e-191e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.160:36673/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772775616, "uuid": "f4922840-191e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.186.24:50330/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772775736, "uuid": "3bf83c18-191f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.156.197:49040/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772775816, "uuid": "6bb4b8df-191f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.160.26:34841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772775862, "uuid": "8742f99f-191f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.150.202:60629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772776219, "uuid": "5c1508d0-1920-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.171.246:40751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772776328, "uuid": "9cdf94b4-1920-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://f7ozu1t9.flogginquisit.digital/?=check&&actmn=YVIBwWnnTOgWtApP", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772776339, "uuid": "a3447955-1920-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.142.216:44279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772776642, "uuid": "57aa7a32-1921-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.142.216:44279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772776643, "uuid": "584839fb-1921-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.33.196:54757/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772777048, "uuid": "49a5360b-1922-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://stre06.aquastream.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772777059, "uuid": "50b27063-1922-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.35.35:41670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772777248, "uuid": "c15d7717-1922-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.103.76:56723/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772777287, "uuid": "d85df501-1922-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.40.65:30161/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772777482, "uuid": "4c6767c0-1923-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.123.246:39712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772777828, "uuid": "1b14c103-1924-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.72.124.157/vxs/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772778069, "uuid": "aa4baeec-1924-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://rx8qk.abcdesign.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772778074, "uuid": "adb0b449-1924-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.14.226:58878/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772778149, "uuid": "da694332-1924-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.223.114:60893/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772778619, "uuid": "f27eb962-1925-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.25:38678/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772778847, "uuid": "7a6af046-1926-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.214.40.65:30161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772779219, "uuid": "581f6840-1927-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.123.246:39712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772779276, "uuid": "79ae7072-1927-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.152.7:51642/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772779276, "uuid": "7a332ac1-1927-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.178.249:44949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772779463, "uuid": "e9287bc4-1927-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.219.213:47828/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772779509, "uuid": "050f6b12-1928-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pixelcraft.abcdesign.in.net/verification.google", "Tag": [ { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772779756, "uuid": "983726ba-1928-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.231.252:47275/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772779765, "uuid": "9d5f78df-1928-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.75.139:59942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772779869, "uuid": "db88817c-1928-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.183.136:47993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772779932, "uuid": "00aaeb63-1929-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.197.145:33649/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772779937, "uuid": "03bbd80f-1929-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.66.226:33954/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772780410, "uuid": "1da253d3-192a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://abcgrid-0form.abcdesign.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772780530, "uuid": "6576270b-192a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.254.48:52201/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772780723, "uuid": "d8347bc1-192a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.186.24:50330/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772780905, "uuid": "45055c98-192b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.35.35:41670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772780911, "uuid": "482f720f-192b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.225.41:38879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781067, "uuid": "a5b14832-192b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://kz7v2.coachcoal.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781078, "uuid": "ac063187-192b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.152.36:53070/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781083, "uuid": "af22e6ce-192b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.0.133:45021/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781130, "uuid": "caf5e133-192b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://anondrop.net/1479090540531421216/1.png", "Tag": [ { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781267, "uuid": "1ca6e4ff-192c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.221.126:56865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781379, "uuid": "5f503e8c-192c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.75.139:59942/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781441, "uuid": "8493e890-192c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.228.209:59864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781504, "uuid": "a9e2e664-192c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.183.136:47993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772781505, "uuid": "aa714b8e-192c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.197.145:33649/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782044, "uuid": "eba0cd8c-192d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.17.68:39170/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782091, "uuid": "07d22cd2-192e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.46.217.187/tul.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782091, "uuid": "07d5c846-192e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.46.217.187/v.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782096, "uuid": "0b0f3359-192e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://176.190.153.160.host.secureserver.net/w1/lib/AutoIt3.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782097, "uuid": "0b98e4ba-192e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.22.38:52297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782102, "uuid": "0e222f71-192e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://admin.hggg.store/Bin/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782148, "uuid": "29ab4539-192e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://coloradoskitowns.com/spankki-zi/spankki.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782152, "uuid": "2be0f6f5-192e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gacorportbet88.space/aplikasi/Portbet88.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782152, "uuid": "2c0c969c-192e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://lmconnectuserappaccesscontrol.online/LAKE%20MICHIGAN%20CU.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782152, "uuid": "2c3df545-192e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gacorportbet88.store/aplikasi/Portbet88.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782152, "uuid": "2c642128-192e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ztscym.pages.dev/apk/iApp%E6%89%8B%E5%86%8C_1.0.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782155, "uuid": "2dcca035-192e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://post-host.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782329, "uuid": "9575e2bc-192e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://teamforge.coachcoal.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782463, "uuid": "e55c92ba-192e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.202.17:57864/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782463, "uuid": "e5759ba8-192e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.202.17:57864/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782521, "uuid": "07e6a610-192f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.152.36:53070/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772782703, "uuid": "7461507b-192f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.0.133:45021/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772783290, "uuid": "d23edaf5-1930-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://coachburn-edge.coachcoal.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772783309, "uuid": "ddfe3e38-1930-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.22.38:52297/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772783433, "uuid": "27b68762-1931-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.119.24:56530/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772783477, "uuid": "42304a0d-1931-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.161.5:60384/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772783537, "uuid": "65e81856-1931-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.22.39:47093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772783649, "uuid": "a83b478e-1931-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://q9wm4.constellupd.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772783947, "uuid": "59df105f-1932-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://starvector.constellupd.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772784330, "uuid": "3e0ef3b1-1933-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.149.65:51051/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772784503, "uuid": "a542dc49-1933-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.174:44973/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772784547, "uuid": "bfe9e37b-1933-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://constell-1node.constellupd.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772784626, "uuid": "eec234b9-1933-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.37.213:39475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772785004, "uuid": "d049e993-1934-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.174.127:49020/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772785027, "uuid": "dd9bec3c-1934-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://t6pzr.breaknbird.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772785044, "uuid": "e7bfa13b-1934-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.119.24:56530/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772785106, "uuid": "0cc2b288-1935-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.47.247:38761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772785169, "uuid": "329dfd79-1935-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.246.85.231:60211/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772785213, "uuid": "4c8d4abb-1935-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://wingflight.breaknbird.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772785687, "uuid": "66e227a6-1936-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://birdfract-sky.breaknbird.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772786012, "uuid": "28a0be36-1937-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.127.214:44571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772786169, "uuid": "8686032f-1937-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://n4qx7.sdflkmicrobiol.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772786348, "uuid": "f1414470-1937-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cellculture.sdflkmicrobiol.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772786424, "uuid": "1e83a268-1938-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.37.213:39475/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772786437, "uuid": "26710f40-1938-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.153.168:57232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772786669, "uuid": "b047c40e-1938-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.149.65:51051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772786888, "uuid": "3335f781-1939-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ygzulpfl.floatmurta.digital/?=check&&actmn=vtRMqiYITFEuxxIu", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772787383, "uuid": "5a165959-193a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.244.214:49455/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772787511, "uuid": "a69a65e3-193a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.244.214:49455/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772787512, "uuid": "a72302ed-193a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.216.225.41:38879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772787799, "uuid": "524d4beb-193b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.77.184:54447/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772787968, "uuid": "b6e397f8-193b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://z5qtr.corvetfordata.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788041, "uuid": "e2745669-193b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.153.168:57232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788096, "uuid": "034752a2-193c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://166.48.94.241:50758/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788097, "uuid": "03da82ac-193c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.87.140:36353/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788392, "uuid": "b3868e60-193c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://datadrive.corvetfordata.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788687, "uuid": "632478a5-193d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://corvetx-stream.corvetfordata.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788760, "uuid": "8ea57df5-193d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.203.233.102/00101010101001/morte.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "8ff856d5-193d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.203.233.102/00101010101001/morte.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "9004c56c-193d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.203.233.102/00101010101001/morte.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "900ab2f3-193d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.203.233.102/00101010101001/morte.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "900ad68c-193d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.203.233.102/00101010101001/morte.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "90290fd6-193d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.203.233.102/00101010101001/morte.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "90293daf-193d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.203.233.102/00101010101001/morte.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "902ae57b-193d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.203.233.102/00101010101001/morte.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788762, "uuid": "902dfd42-193d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.203.233.102/00101010101001/debug", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788763, "uuid": "9065291c-193d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.203.233.102/00101010101001/morte.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788763, "uuid": "90796241-193d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.203.233.102/00101010101001/morte.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788763, "uuid": "90af6c77-193d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.203.233.102/00101010101001/morte.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788763, "uuid": "90ba88e9-193d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.203.233.102/00101010101001/morte.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772788763, "uuid": "90c294d5-193d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.203.233.102/00101010101001/morte.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772789361, "uuid": "f4d04669-193e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.168.201:49333/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772789426, "uuid": "1bd73442-193f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.77.184:54447/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772789662, "uuid": "a8a0de21-193f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.33.196:54757/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772789663, "uuid": "a92bf882-193f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.121.20:48844/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772789828, "uuid": "0b707a98-1940-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://w3x9m.dennyportfol.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772790609, "uuid": "dcbba8e1-1941-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://stylemansisforeal.com/3/abroadeez/vendor.chunk.rlk9qg.js", "Tag": [ { "name": "skimmer", "colour": "#141e26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772790609, "uuid": "dd0e55ff-1941-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://lsvvpb8t.drinktide.digital/?=check&&actmn=ELXlcEnNyuHDptpw", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772790627, "uuid": "e7bfc721-1941-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.226.162.217/997dfa4c91?force=1", "Tag": [ { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772790787, "uuid": "46df7564-1942-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://denny-holdgrid.dennyportfol.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772790799, "uuid": "4e58d54e-1942-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.121.20:48844/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772791037, "uuid": "dbcafa10-1942-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.168.201:49333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772791569, "uuid": "19361003-1944-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://visualstage.fourscene.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772791747, "uuid": "836f1067-1944-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://scene4-render.fourscene.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772791881, "uuid": "d34254a4-1944-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.11.215:38338/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772791938, "uuid": "f4f90e27-1944-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.89.45:38390/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772792350, "uuid": "eac40699-1945-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.63.100:59468/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772792351, "uuid": "eb2405da-1945-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.2.23:58437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772792412, "uuid": "0f716dcc-1946-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://y7qz2.amperewin.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772792480, "uuid": "37d9501c-1946-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.188.252:60403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772792526, "uuid": "538f462f-1946-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://currentflow.amperewin.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772792827, "uuid": "072a95a1-1947-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://amp-winvector.amperewin.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772792959, "uuid": "55596db4-1947-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.89.45:38390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772792960, "uuid": "55f2349d-1947-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.157.88:38072/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772793009, "uuid": "7376a8d1-1947-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://kvid5obz.awakepathog.digital/?=check&&actmn=PMmxemMLVOJZPEko", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772793129, "uuid": "bb0a84b5-1947-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.17.247:51110/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772793318, "uuid": "2b51da1b-1948-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.190.19:42873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772793427, "uuid": "6cc34113-1948-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://q7mxr.addictfear.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772793559, "uuid": "bb193db2-1948-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.117.96:47785/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772793847, "uuid": "66b5e349-1949-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://addict-veilcore.addictfear.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772793916, "uuid": "904adf3a-1949-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.157.88:38072/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772793916, "uuid": "904c02df-1949-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.63.100:59468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772793917, "uuid": "90ca01cf-1949-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.131.89:34342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772794088, "uuid": "f6c7c3ae-1949-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.163.220:47170/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772794160, "uuid": "21b2e64a-194a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.150.249:59901/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772794209, "uuid": "3eed0fdc-194a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://v9k2p.proofsurvivor.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772794274, "uuid": "654f2f0a-194a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.44.101:53800/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772794749, "uuid": "80cb2748-194b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://lifeline.proofsurvivor.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772794990, "uuid": "1001da66-194c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://proof-anchorgrid.proofsurvivor.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772795181, "uuid": "81cd9c40-194c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.190.19:42873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772795235, "uuid": "a21c2039-194c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.152.7:51642/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772795348, "uuid": "e5595000-194c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://x4qzt.ochechstop.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772795598, "uuid": "7a769cff-194d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.131.89:34342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772795659, "uuid": "9f019aeb-194d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.150.249:59901/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772796126, "uuid": "b596db49-194e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ochech-lockframe.ochechstop.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772796430, "uuid": "6a39570a-194f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.86.110:38376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772796489, "uuid": "8db0868a-194f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://r8kqm.rantiercling.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772796558, "uuid": "b6e39b63-194f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.229.116:51863/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772796847, "uuid": "62ee5171-1950-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://circleforge.rantiercling.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772797087, "uuid": "f24aed9a-1950-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://esvpotfvg0.ufs.sh/f/okyTib8Lmo0CqK3eVDlBZJflCVTk6c3Evo0xYW49redmB8Xu", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772797147, "uuid": "161ecbf7-1951-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://esvpotfvg0.ufs.sh/f/okyTib8Lmo0CkkKwp433KzJrq5ANjPuyeWihp21ZQsTDklSf", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772797148, "uuid": "16887f93-1951-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://esvpotfvg0.ufs.sh/f/okyTib8Lmo0C3woZNTCOME9sySIDUnBdqjNx6cQ7ZV4Plviz", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772797149, "uuid": "16d3d603-1951-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://esvpotfvg0.ufs.sh/f/okyTib8Lmo0CnucuMLoxD2RvxUO3ZhpN7awT5A9VJfbLuQ4K", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772797208, "uuid": "3a7b7ac9-1951-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/vidar/random.exe", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772797209, "uuid": "3aad66be-1951-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://rantier-loopnode.rantiercling.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772797209, "uuid": "3b0dcfb9-1951-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://zifg62sw71.ufs.sh/f/WD5aU82s08Cwa6RXv8N4EY2hVBsoUwGM6XuAeWibTC9DNZnl", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772797210, "uuid": "3bb53778-1951-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://esvpotfvg0.ufs.sh/f/okyTib8Lmo0CigHpqVz5lMqT3DwY8G1OtbPRQgF6v0U2oBhj", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772797568, "uuid": "1104c79f-1952-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://t5zw3.piittablet.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772797629, "uuid": "3501715d-1952-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.15.129:56641/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772797824, "uuid": "a94a55c0-1952-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.99.250:43582/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772797873, "uuid": "c6e20d99-1952-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.178.28:46151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772797927, "uuid": "e6ed77f2-1952-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dataplate.piittablet.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798053, "uuid": "31bf723f-1953-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.57.37:40096/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798120, "uuid": "5a17aefd-1953-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.57.37:40096/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798121, "uuid": "5a7fd335-1953-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.127.82:53431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798121, "uuid": "5a844128-1953-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.199.53:57865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798300, "uuid": "c50676ba-1953-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.93.131:41073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798349, "uuid": "e26d9024-1953-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://piit-tabvector.piittablet.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798467, "uuid": "28aa7eb8-1954-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/6149304756/9MVYpgf.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798646, "uuid": "9368c6ba-1954-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://m2q9x.dropout.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798709, "uuid": "b91083c4-1954-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7411337060/ZCGm9Ky.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798710, "uuid": "b9a6fe64-1954-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7290860719/OTcX1Qs.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798767, "uuid": "db910524-1954-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/test/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798767, "uuid": "db9107d3-1954-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7453936223/5GFpJxh.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798778, "uuid": "e2413c95-1954-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.28.157:56782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798827, "uuid": "ff175b43-1954-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/5900855435/eNLe4nm.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798827, "uuid": "ff661528-1954-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8499672124/b1JNsvy.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798828, "uuid": "ffbdb9c9-1954-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7782139129/PKenO2z.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798948, "uuid": "4774fbc1-1955-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7260582679/YOaxz85.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798948, "uuid": "4774fcf7-1955-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8243287745/p9ulf8e.msi", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798951, "uuid": "491ab1f8-1955-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/5908119101/gkmdY2O.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772798953, "uuid": "4a994a0f-1955-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7725193537/jdVAN80.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772799008, "uuid": "6b42675e-1955-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/gop/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772799008, "uuid": "6b4273ca-1955-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/6608710704/1r6sQRc.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772799009, "uuid": "6b794133-1955-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://exitroute.dropout.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772799024, "uuid": "745df406-1955-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.234.225:41452/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772799128, "uuid": "b289d687-1955-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sqddakti.awakepathog.digital/?=check&&actmn=FhKBGAbPdxMGLMmf", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772799310, "uuid": "1f277b81-1956-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/6961337700/4p8oGAO.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772800147, "uuid": "11f340cb-1958-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/1660459253/W3Trdgs.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772800451, "uuid": "c75d1a78-1958-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.234.143:34579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772800525, "uuid": "f356a28a-1958-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.241.53:44423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772800640, "uuid": "381270de-1959-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.206.144.30:59164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772801529, "uuid": "49a09fca-195b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/final/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772801655, "uuid": "94d796fb-195b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.183.59:54993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772801889, "uuid": "205acef1-195c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8468794285/sBC01fa.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772802130, "uuid": "b02f1c32-195c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.231.252:47275/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772802198, "uuid": "d87b4b85-195c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.206.144.30:59164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772802488, "uuid": "854d0825-195d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.163.220:47170/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772803114, "uuid": "fab89855-195e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.24.137:54688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772803274, "uuid": "5a20a46e-195f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.183.59:54993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772804227, "uuid": "9218d22e-1961-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7309295924/SpdWqa6.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772804237, "uuid": "97b00089-1961-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.195.119:38772/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772804656, "uuid": "91c2f34c-1962-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.101/", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772804657, "uuid": "91e2ff95-1962-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.18/", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772804721, "uuid": "b81ef391-1962-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.93/", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772804721, "uuid": "b830e3d4-1962-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.52/", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772805263, "uuid": "fb3c138e-1963-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.24.137:54688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772805379, "uuid": "4055f98b-1964-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.133.221:36494/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772805862, "uuid": "6021b33f-1965-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.31.86:54913/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806038, "uuid": "c931e660-1965-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.28.103.46:59881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806162, "uuid": "1304a69e-1966-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.28.45:55414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806697, "uuid": "5248cf5e-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.102/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806700, "uuid": "53d4374f-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.53.82/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806700, "uuid": "53d87916-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.109/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806700, "uuid": "53d89c61-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.55.63/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806700, "uuid": "53d89d17-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.104/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806700, "uuid": "53ddbc8e-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.103/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806700, "uuid": "53e09f39-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.152/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806700, "uuid": "53e19fd5-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.100/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806700, "uuid": "53ef29ed-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.240.222/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806700, "uuid": "53f027a1-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.174/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806700, "uuid": "53f71ef0-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.44/", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806766, "uuid": "7b761aca-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.34.89:44710/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806883, "uuid": "c1274562-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.176/iran.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806883, "uuid": "c128533f-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.217/a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806883, "uuid": "c1420cf7-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.66.228.176/linux_amd64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806884, "uuid": "c14fda2a-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.207.157.11/linux_arm64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806884, "uuid": "c1529511-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.66.228.176/linux_arm64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806884, "uuid": "c16c9c5b-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.207.157.11/linux_amd64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806890, "uuid": "c507f2f9-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.176/iran.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806890, "uuid": "c5526865-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.66.228.176/linux_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806892, "uuid": "c64a92b0-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.207.157.11/linux_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772806941, "uuid": "e3473ade-1967-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.186.68:46843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772807006, "uuid": "0a32f06b-1968-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.242:41514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772807648, "uuid": "88cd1b20-1969-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/6149304756/t1nM7M0.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772807721, "uuid": "b44af71b-1969-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.233.242:59675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772807898, "uuid": "1ddcc015-196a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.242:41514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772807898, "uuid": "1e291390-196a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.99.201.96:58735/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808022, "uuid": "67a1cb5a-196a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.169.238:38160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808194, "uuid": "ce703810-196a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.233.242:59675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808261, "uuid": "f63b1e18-196a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.206.209:48540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808379, "uuid": "3ceebc07-196b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.34.89:44710/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808430, "uuid": "5b05b15e-196b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/5758620506/HjZucsF.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808502, "uuid": "85d19fe9-196b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.186.68:46843/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808608, "uuid": "c4ecc8f6-196b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.117/TaskSvc.vbs", "Tag": [ { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808609, "uuid": "c5f5a4d1-196b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.102.255/files/totallynotavirus.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808610, "uuid": "c612928d-196b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.102.255/files/coolfile.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808610, "uuid": "c625eb5e-196b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.102.255/files/mswincryptographdata.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808670, "uuid": "e9e8139c-196b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.102.255/files/Mu-lime.img", "Tag": [ { "name": "img", "colour": "#89ee14", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808793, "uuid": "339f8d89-196c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.55/bins/apex_cnc.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808807, "uuid": "3bcf163b-196c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.55/bins/apex.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808807, "uuid": "3be4c3b8-196c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.193.53:39795/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808808, "uuid": "3c3cc196-196c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.55/bins/apex.x86_64", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808814, "uuid": "40198684-196c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.55/bins/apex_cnc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808815, "uuid": "40c518fe-196c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.55/bins/apex.x86", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808815, "uuid": "40d1cb6d-196c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.55/bins/apex.mipsle", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808816, "uuid": "4105f5d0-196c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.55/bins/apex.mips", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808907, "uuid": "775138db-196c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://temp.sh/iNWtZ/client.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808909, "uuid": "78ad5dda-196c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bird-farm.pigeonbreed.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808921, "uuid": "7fcc3d19-196c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.111:53207/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808922, "uuid": "803b1dd7-196c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.97.14:60714/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772808969, "uuid": "9c8619d8-196c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/6902778688/bQVtGjS.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772809211, "uuid": "2c44b11c-196d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pigeon-v2.pigeonbreed.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772809211, "uuid": "2c4c229b-196d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7362035837/T3f3JTM.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772809523, "uuid": "e6b001ac-196d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.111:53207/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772809580, "uuid": "089a6402-196e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.178.249:44949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772809770, "uuid": "79bc0baf-196e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.58.134:52739/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772809951, "uuid": "e56190f4-196e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.114.230:43810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772810063, "uuid": "288f94ee-196f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.169.80:35050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772810361, "uuid": "d9d3e843-196f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.86.110:38376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772810768, "uuid": "ccc85ff8-1970-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://young-site.youngwoman.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772810901, "uuid": "1bb3d88e-1971-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.97.14:60714/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772810902, "uuid": "1c42c5c7-1971-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.223.18:54111/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772811189, "uuid": "c7c41f80-1971-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/1225117411/Blr3MBe.msi", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772811501, "uuid": "814d9762-1972-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.58.134:52739/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772811680, "uuid": "ec644ea3-1972-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.169.80:35050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772811802, "uuid": "34c8138a-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://102.33.47.44:39706/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812033, "uuid": "bec3228c-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/a", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812034, "uuid": "beefd8f5-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.89.136/nuts/bolts", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812034, "uuid": "bf296881-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.151.155.223/spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812037, "uuid": "c1008087-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/cache", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812037, "uuid": "c13ea212-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.196.41.201/x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "c4c57fc7-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.151.155.223/arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "c4c7496f-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.151.155.223/x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "c4d60985-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.151.155.223/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812043, "uuid": "c4d615dc-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.151.155.223/jack5tr.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "c4e41e8e-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.151.155.223/arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "c4e461e4-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.151.155.223/sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "c4e47c11-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.89.136/nuts/poop", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "c4e91e90-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.151.155.223/ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "c4e980d8-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.151.155.223/arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "c4edcb9e-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.151.155.223/debug.dbg", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "c4f20175-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "c4fa21d9-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.124.63.133/main_x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "c4fa64e7-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.198.234.189/armv7l", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "c4fa8147-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.151.155.223/mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "c4fad982-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/huhu/titanjr.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "c501f943-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/all.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "c5021b7e-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.151.155.223/mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "c503a963-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.124.63.133/main_arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "c504b2b7-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.116.36.184/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "c5079ca7-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/huhu/titanjr.x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "c51beb65-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812044, "uuid": "c526b47a-1973-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.81/run.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812148, "uuid": "03405370-1974-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/huhu/titanjr", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812148, "uuid": "036b0b55-1974-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.151.155.223/arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812148, "uuid": "036ce400-1974-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.151.155.223/m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "050756c2-1974-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_load.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "05189e70-1974-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_load.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "0539ad9b-1974-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812151, "uuid": "0539b948-1974-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnsh4xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812152, "uuid": "0545e4f2-1974-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxni386xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812152, "uuid": "05461852-1974-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812152, "uuid": "054632a9-1974-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812152, "uuid": "05475498-1974-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_load.mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812152, "uuid": "05495159-1974-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnm68kxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812152, "uuid": "054d76d4-1974-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.151.155.223/x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812211, "uuid": "289c929d-1974-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnmipsxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812211, "uuid": "289c98d0-1974-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnsh2xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812211, "uuid": "289fe18d-1974-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnor1kxnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812211, "uuid": "28ced102-1974-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812276, "uuid": "4f39aad4-1974-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.215.236.81/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812759, "uuid": "6f40ffc6-1975-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.86.221:60894/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812927, "uuid": "d385553d-1975-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.203.233.102/00101010101001/morte.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812929, "uuid": "d48d8636-1975-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.28.159:58619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772812999, "uuid": "fe2dee89-1975-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.142.62:49123/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772813119, "uuid": "46035819-1976-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.142.62:49123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772813662, "uuid": "896a5952-1977-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.165.56:53442/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772813826, "uuid": "eb9a8015-1977-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/7044575709/ABbqsJz.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772813830, "uuid": "edb70806-1977-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.165.56:53442/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814320, "uuid": "11feb2e0-1979-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.28.159:58619/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814858, "uuid": "52838737-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/x", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814860, "uuid": "53585359-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.121.213:42546/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814914, "uuid": "73efdaa3-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.124.63.133/main_mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814914, "uuid": "73f851a2-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/huhu/titanjr.mipsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814926, "uuid": "7afb726a-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_load.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814926, "uuid": "7b0ecec6-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_load.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7b474764-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_load.spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7b5bb4e5-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_load.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7b6cf353-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_load.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7b6f639c-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/huhu/titanjr.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7b76cd26-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.121.213:42546/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7b7ce8db-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_load.arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7b8482fb-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_load.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7b856058-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/huhu/titanjr.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7b8e0e9d-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_load.x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7b9455ee-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_load.i486", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7b95eb16-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/huhu/titanjr.spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7b9662b2-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/huhu/titanjr.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7b9bcd63-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.124.63.133/main_arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7ba4c414-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/huhu/titanjr.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7ba4ecb0-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.124.63.133/main_sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7ba5a890-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/huhu/titanjr.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7ba622ee-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/realtek", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7ba826ec-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/huhu/titanjr.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7bbacf63-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.124.63.133/main_mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7bbb3722-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/huhu/titanjr.ppc440", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7bbb92b5-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.124.63.133/main_arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7bbb92ca-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.124.63.133/main_m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7bbc2dc5-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/huhu/titanjr.x86_32", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7bbca1f2-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.124.63.133/main_arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7bbcb522-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/huhu/titanjr.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7bbcb520-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/huhu/titanjr.i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7bbce793-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/huhu/titanjr.arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7bc22974-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.124.63.133/main_ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7bc281b9-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/titanjr.x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7bc3a705-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_load.i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7bc8bd08-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/huhu/titanjr.i486", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7bca1d98-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.124.63.133/main_x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814927, "uuid": "7bd67781-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_load.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814928, "uuid": "7be4e76b-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/nullnet_load.x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772814978, "uuid": "99d95e93-197a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.186.100:46073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772815271, "uuid": "48ca45e6-197b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.182.207:44013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772815877, "uuid": "b191d6e1-197c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.167:39090/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772815998, "uuid": "f9c60e9f-197c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.117.109:34226/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772816230, "uuid": "8438c1b3-197d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.102.42:53023/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772816484, "uuid": "1b853134-197e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.167:39090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772816487, "uuid": "1d513dc0-197e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.157.249:52091/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772816660, "uuid": "8485e78e-197e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.117.109:34226/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772816900, "uuid": "1361c54b-197f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.182.207:44013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772817067, "uuid": "774b32e1-197f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/2070717540/IPvJTgG.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772817128, "uuid": "9b944283-197f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.166.146:58818/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772817498, "uuid": "77f3f235-1980-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.102.42:53023/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772817677, "uuid": "e2a36283-1980-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.178.238:51839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772817745, "uuid": "0b10c91f-1981-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.15.129:56641/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772817934, "uuid": "7bbcc934-1981-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.231.238:40650/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772817982, "uuid": "98bff5d9-1981-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.228.197/wget.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772817983, "uuid": "98cf2425-1981-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.228.197/w.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818100, "uuid": "deb12d30-1981-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.228.197/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818100, "uuid": "deb12d5c-1981-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.228.197/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818100, "uuid": "deb12e60-1981-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.228.197/bins/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818100, "uuid": "deb13b64-1981-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.228.197/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818100, "uuid": "deb15f71-1981-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.228.197/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818100, "uuid": "deb34098-1981-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.228.197/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818153, "uuid": "fe7dcee0-1981-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.228.197/bins/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818153, "uuid": "fea9dbbf-1981-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.228.197/bins/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818153, "uuid": "feb27773-1981-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.228.197/bins/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818153, "uuid": "feb285e5-1981-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.228.197/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818153, "uuid": "feb28b5a-1981-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.228.197/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818154, "uuid": "febc8edb-1981-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.228.197/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818213, "uuid": "22310f11-1982-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://s3.g.s4.mega.io/aileqac3yep7oqdhygjpberqqnk2zrnhck2lx/busket/2/05x06x26/01/BKRPAMCT.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818219, "uuid": "258c4701-1982-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.162:47165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818389, "uuid": "8b28e9df-1982-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.185.17:53039/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818639, "uuid": "2005595d-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.76.44.91/hiddenbin/boatnet.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818639, "uuid": "20069544-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.76.44.91/hiddenbin/boatnet.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818639, "uuid": "200bfc0a-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.76.44.91/hiddenbin/boatnet.x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818639, "uuid": "200d265e-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.76.44.91/hiddenbin/boatnet.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818639, "uuid": "20135b10-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.76.44.91/hiddenbin/boatnet.spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818639, "uuid": "20246fc6-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.76.44.91/hiddenbin/boatnet.arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818640, "uuid": "207d85e2-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.76.44.91/hiddenbin/boatnet.x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818641, "uuid": "214c457b-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.76.44.91/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818641, "uuid": "21531a89-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.76.44.91/hiddenbin/boatnet.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818641, "uuid": "2154f2e2-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.76.44.91/hiddenbin/boatnet.x86-DEBUG", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818641, "uuid": "2163455b-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.76.44.91/hiddenbin/boatnet.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818641, "uuid": "21643f0c-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.76.44.91/hiddenbin/boatnet.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818641, "uuid": "21690252-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.76.44.91/hiddenbin/boatnet.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818641, "uuid": "21691b89-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.76.44.91/hiddenbin/boatnet.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "63f28cca-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/jawirbot.x86_32", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "63f68a71-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/jawirbot.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "63f68bac-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/jawirbot.mipsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "63f696eb-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/debug/debug.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "63fdec31-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/debug/debug.i486", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "63fdf11d-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/debug/debug.i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "64060bda-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/jawirbot.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "6407435a-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/jawirbot.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "640df559-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/debug/debug.mipsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "640f2de3-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/debug/debug.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "640f5891-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/jawirbot.ppc440", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "640f6403-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/debug/debug.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "64116535-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/jawirbot.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "64117214-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/jawirbot.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "642a3f63-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/jawirbot.i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "642ad295-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/jawirbot.i486", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818753, "uuid": "6431d5f3-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/debug/debug.x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "67bdcdba-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/jawirbot.x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "67be0260-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/debug/debug.x86_32", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "67c036b3-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/debug/debug.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "67cb327e-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/jawirbot.arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "67cb5c5b-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/jawirbot.spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "67cbbd61-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/jawirbot.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "67d3ea33-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/debug/debug.ppc440", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "67d44267-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/jawirbot.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "67d96a2b-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/debug/debug.arc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "67d9daba-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/debug/debug.spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "67df025e-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/debug/debug.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "67e21df1-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/debug/debug.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818759, "uuid": "67e3f520-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/debug/debug.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818760, "uuid": "680d4998-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/debug/debug.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818812, "uuid": "86eff39a-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.139/huhu/jawirbot.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "b0e9efff-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/violetmpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "b1339fe7-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/violetarm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818882, "uuid": "b13a1fce-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/violetm68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b1439658-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/violetsh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b14629a3-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/violetmips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b17b6626-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/bins/arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b1841090-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/bins/armv6l", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b1842040-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/bins/mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b1851e1d-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/bins/sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b1852ee9-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/bins/arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b1876030-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/bins/powerpc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b18af9d9-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/bins/mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b18b2521-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/bins/powerpc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b18bbc85-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/bins/mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b18c5f98-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/bins/x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b18d606e-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/violetarm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b18d7446-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/bins/arm4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b18e335c-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/bins/violetarm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b196fafb-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/bins/i586", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b1995cb1-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/bins/violetppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b199a06f-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/bins/violetx86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b19b8280-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/bins/violetsh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b19bf895-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/bins/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b19eb6ed-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/bins/armv7l", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b1ace7a7-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/sora.arm4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b1ae2be4-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/bins/sora.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b1b3364b-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.97.124.196/sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b1b5305e-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/bins/sora.mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b1b8e150-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.20/bins/x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b1ba6a27-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.97.124.196/mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b1ba87c0-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.97.124.196/x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818883, "uuid": "b1c12af3-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.20/bins/x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818884, "uuid": "b1ec3e7b-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/bins/sora.x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818884, "uuid": "b1fa4e13-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.97.124.196/ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818884, "uuid": "b1ff1d6b-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/bins/sora.arm4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818884, "uuid": "b20f55c0-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/bins/violetspc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818885, "uuid": "b295d8cf-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.20/bins/arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818885, "uuid": "b29a4925-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/bins/violetarm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818885, "uuid": "b2dc1548-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.20/bins/ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818885, "uuid": "b2e5f46c-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.20/bins/spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818885, "uuid": "b2ff37bc-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/bins/violetarm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818892, "uuid": "b706e8bd-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.20/bins/sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818892, "uuid": "b712a278-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/violetppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818892, "uuid": "b7145809-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/bins/m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818892, "uuid": "b714ac52-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.20/bins/arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818894, "uuid": "b849a1ed-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/bins/x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818894, "uuid": "b85d37c1-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/bins/arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818895, "uuid": "b87f388d-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/violetspc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818895, "uuid": "b8879138-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/bins/sora.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818895, "uuid": "b88d2141-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/bins/violetarm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818895, "uuid": "b891cd57-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.97.124.196/arm4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818895, "uuid": "b89ad32e-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.97.124.196/arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818895, "uuid": "b8a03532-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.97.124.196/arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818901, "uuid": "bbfa4ae8-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/bins/m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818901, "uuid": "bc5f2915-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/bins/armv6l", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818901, "uuid": "bc741962-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/bins/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818902, "uuid": "bceb2af9-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/bins/mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818902, "uuid": "bcf5beed-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/bins/arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818902, "uuid": "bd202894-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/bins/arm4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818903, "uuid": "bd74d495-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/bins/i586", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818903, "uuid": "bd984bbe-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/sora.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818903, "uuid": "bda9f35d-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/bins/sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818903, "uuid": "bdad1e93-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/bins/ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818903, "uuid": "bdaf794b-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.20/bins/m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818903, "uuid": "bdbae1f1-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.97.124.196/mipsel", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818903, "uuid": "bdbbbb9b-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/bins/armv7l", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "bdcddb07-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.97.124.196/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "bde79aef-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.20/bins/mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "bde9ff89-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/bins/sora.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "bdf15266-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.97.124.196/x32", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "be1f9372-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/bins/ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "be2563ed-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/bins/sora.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "be3235d4-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/bins/armv5l", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "be352cb9-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/bins/violetmips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "be36cb73-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.97.124.196/m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "be3a36e7-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/bins/armv5l", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "be4a97ec-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/bins/sora.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "be4e1dd6-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.20/bins/arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818904, "uuid": "be570726-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.20/bins/mipsel", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818905, "uuid": "be6a04a7-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/bins/violetmpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818905, "uuid": "be92486d-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/bins/violetm68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818906, "uuid": "bf1b5cbf-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/bins/sora.arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818907, "uuid": "bfdac452-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.97.124.196/mipsle", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818909, "uuid": "c0ecfdff-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/bins/sora.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818909, "uuid": "c105bec8-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/violetarm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818909, "uuid": "c1122d4c-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/violetx86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818970, "uuid": "e56150b6-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.20/bins/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818986, "uuid": "eea03ddc-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.137/d3_cnc_user.c.txt", "Tag": [ { "name": "c", "colour": "#5249f7", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818987, "uuid": "ef6c8da4-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.137/x86_tools.txt", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "py", "colour": "#ac075f", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818987, "uuid": "ef7d282e-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.137/bot_utils.txt", "Tag": [ { "name": "c", "colour": "#5249f7", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772818997, "uuid": "f5c08f4b-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/sora.mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819002, "uuid": "f85b9093-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/sora.ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819002, "uuid": "f85f0299-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/sora.x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819002, "uuid": "f8621712-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/sora.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819002, "uuid": "f8622354-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/sora.arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819002, "uuid": "f862ac2a-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/sora.m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819002, "uuid": "f865aeac-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/sora.arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819002, "uuid": "f86e4b46-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/sora.sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819002, "uuid": "f872ecdf-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.89.170.85/bins/violetarm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819002, "uuid": "f88f6577-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/sora.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819012, "uuid": "fe636a80-1983-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.0.32.141:3001/gate.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819061, "uuid": "1b54a9b2-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.127.226.170:38830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819306, "uuid": "ad604ca3-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/bot_mipsle", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819307, "uuid": "ae6a366a-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/bot_x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819308, "uuid": "ae953cfd-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/bot.arm64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819308, "uuid": "aededbe9-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/bot.mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819308, "uuid": "aeffc447-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/bot_x64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819309, "uuid": "af4c4dbf-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/bot.arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819310, "uuid": "afe07eac-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/x86_64-linux-musl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819355, "uuid": "cac1a09d-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/bins.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819356, "uuid": "cb9d8ea7-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://50.247.12.209/start.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819357, "uuid": "cbd5168d-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/yarn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819357, "uuid": "cbd5249a-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/bin", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819357, "uuid": "cbd5381c-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/kla.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819357, "uuid": "cbe77af8-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/bins.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819357, "uuid": "cbe87954-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/bin", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819357, "uuid": "cbe9b911-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.97.124.196/milan.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819357, "uuid": "cbee13cf-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.233.190.114/payload.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819358, "uuid": "cc8de59a-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/pay", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819358, "uuid": "cc8dfceb-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/yarn", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819358, "uuid": "cc9251d3-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48:8080/pay", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819358, "uuid": "cc9574a0-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.118.48/kla.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819358, "uuid": "ccace4a9-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.97.124.196/run.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819420, "uuid": "f1518bc6-1984-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.162:47165/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819531, "uuid": "33d8dce2-1985-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.9.166:45848/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819532, "uuid": "3470408d-1985-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.230.170:50444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819830, "uuid": "e627d819-1985-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://asteriaproject.dstat.click/bins/arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819830, "uuid": "e6304d8f-1985-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://asteriaproject.dstat.click/bins/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819830, "uuid": "e63050c7-1985-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://asteriaproject.dstat.click/bins/arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819830, "uuid": "e6305345-1985-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://asteriaproject.dstat.click/bins/sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819830, "uuid": "e63059e6-1985-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://asteriaproject.dstat.click/bins/arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819830, "uuid": "e6306375-1985-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://asteriaproject.dstat.click/bins/x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819830, "uuid": "e6306bfa-1985-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://asteriaproject.dstat.click/bins/ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819830, "uuid": "e63617ee-1985-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://asteriaproject.dstat.click/bins/spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819830, "uuid": "e6448b01-1985-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://asteriaproject.dstat.click/bins/arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819830, "uuid": "e646ebe4-1985-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://asteriaproject.dstat.click/bins/m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819831, "uuid": "e64b1cf5-1985-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://asteriaproject.dstat.click/bins/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772819831, "uuid": "e669bf45-1985-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://asteriaproject.dstat.click/bins/mipsel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772820548, "uuid": "91c5dd39-1987-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://young01.youngwoman.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772820847, "uuid": "44385129-1988-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://woman-flow.youngwoman.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772820859, "uuid": "4b299105-1988-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.9.166:45848/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772821041, "uuid": "b7aba726-1988-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.230.170:50444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772821100, "uuid": "dab60372-1988-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.78.161:48958/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772821329, "uuid": "63592390-1989-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://moro-v4.moroshkasvet.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772821399, "uuid": "8d6bc36a-1989-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.193.16:51039/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772821516, "uuid": "d2e224c1-1989-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.35.217:37425/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772821569, "uuid": "f2a1bf2f-1989-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.128.158:43018/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772822169, "uuid": "58694860-198b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://svet09.moroshkasvet.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772822229, "uuid": "7c14c625-198b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.187.161:51321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772822599, "uuid": "585d6482-198c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.78.161:48958/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772822951, "uuid": "2a811a6c-198d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.121.10:54450/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772823077, "uuid": "7517a163-198d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.193.16:51039/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772823077, "uuid": "752000fe-198d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.35.217:37425/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772823668, "uuid": "d57cb505-198e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.187.161:51321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772823980, "uuid": "8f6a8203-198f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.28.103.46:59881/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772824447, "uuid": "a5d8a87a-1990-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://blood-unit.dialectblood.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772824627, "uuid": "10f24312-1991-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dia-v5.dialectblood.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772824759, "uuid": "6021b70e-1991-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.192.27:37472/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772824890, "uuid": "adcf43fd-1991-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.135.23:33187/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772825228, "uuid": "776574d6-1992-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://blood04.dialectblood.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772826192, "uuid": "b5e90872-1994-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.132.207:43483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772826323, "uuid": "044b47c7-1995-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.192.27:37472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772826366, "uuid": "1df1979b-1995-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://austro02.austrodouble.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772826376, "uuid": "23bb3b44-1995-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.129:60562/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772826798, "uuid": "1f7f415d-1996-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.196.118:59902/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772828896, "uuid": "01c29fdb-199b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.60.238:32853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772829024, "uuid": "4dd4f204-199b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.82.61:47641/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772829200, "uuid": "b70a4b46-199b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.17.247:51110/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772829564, "uuid": "8ff66594-199c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.135.56:46233/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772829679, "uuid": "d4444e50-199c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.126.55:32969/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772829862, "uuid": "4162d083-199d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.60.238:32853/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772830342, "uuid": "5f5f308b-199e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.207:42733/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772830342, "uuid": "5fceafe5-199e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.189.169:59477/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772830342, "uuid": "5fe315fa-199e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.22.65:55430/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772830820, "uuid": "7c9acc73-199f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.155.9:59677/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772831121, "uuid": "303088a8-19a0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.207:42733/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772831169, "uuid": "4c63d49f-19a0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.126.55:32969/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772831169, "uuid": "4c97c996-19a0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8733674968/jLZuxmu.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772831241, "uuid": "77566812-19a0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.155.9:59677/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772831290, "uuid": "94a634ca-19a0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.135.56:46233/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772831525, "uuid": "2107807b-19a1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.228.197/main.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772831525, "uuid": "2107cca0-19a1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.228.197/o.xml", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772831537, "uuid": "27eb7a19-19a1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.138.251:40025/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772831663, "uuid": "7328ff13-19a1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.138.251:40025/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772831714, "uuid": "914e63cc-19a1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://double-sync.austrodouble.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772831833, "uuid": "d875e879-19a1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.189.169:59477/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772831902, "uuid": "01a1b99d-19a2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.22.65:55430/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772832488, "uuid": "5ecbd87e-19a3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://rich-v7.minenrichment.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772832492, "uuid": "615bbe2d-19a3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.89.61.252:37395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772832504, "uuid": "6871a9dc-19a3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.69.158:32861/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772832621, "uuid": "addcb0dd-19a3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.89.61.252:37395/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772832750, "uuid": "fae5b2e5-19a3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.168.50.87:53655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772832909, "uuid": "59cb5a54-19a4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/1797567872/w6UBu3m.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772833328, "uuid": "532bdb35-19a5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mine08.minenrichment.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772833460, "uuid": "a22a16d4-19a5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.112.39:47335/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772833460, "uuid": "a23f3404-19a5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.25.150:46376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772833519, "uuid": "c58e8173-19a5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.25.150:46376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772833687, "uuid": "298eef92-19a6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://rich-flow.minenrichment.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772833762, "uuid": "562c2333-19a6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.151.156.198:38219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772833876, "uuid": "9a32b974-19a6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.69.158:32861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772833956, "uuid": "c9b7d009-19a6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.245.226.151:40151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772834167, "uuid": "47588b60-19a7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.216.228:55349/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772834287, "uuid": "8ece82c6-19a7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://tank-gate.representtank.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772834774, "uuid": "b152b17c-19a8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.101:44745/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772834775, "uuid": "b1dbba4f-19a8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.112.39:47335/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772835246, "uuid": "ca7d18f3-19a9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://tank05.representtank.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772835371, "uuid": "1545f852-19aa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.101:44745/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772835432, "uuid": "398b2f9e-19aa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.151.156.198:38219/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772835434, "uuid": "3aca8180-19aa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.245.226.151:40151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772835453, "uuid": "45e20eb2-19aa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.102.248:39218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772835849, "uuid": "31f0ae51-19ab-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.216.228:55349/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772835850, "uuid": "325a98c2-19ab-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.148.98:42743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772836087, "uuid": "bfb2e0aa-19ab-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://test-top.intesttop.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772836096, "uuid": "c58d39d8-19ab-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.13.88:57271/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772836160, "uuid": "eb74d214-19ab-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.250.193:34470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772836333, "uuid": "52a182e5-19ac-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.194.94:38915/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772836391, "uuid": "7526c26c-19ac-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://intest-v9.intesttop.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772836878, "uuid": "975760f2-19ad-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.232:43552/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772837117, "uuid": "25df70b1-19ae-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.148.98:42743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772837178, "uuid": "49f83655-19ae-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.250.193:34470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772837651, "uuid": "64351e26-19af-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.170.61:57843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772837767, "uuid": "a91cf307-19af-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://put-vault.sanctunputer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772837836, "uuid": "d299837e-19af-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.194.94:38915/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772837898, "uuid": "f7657996-19af-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.13.88:57271/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772838018, "uuid": "3f1ec652-19b0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.1.45:37103/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772838127, "uuid": "7fceecdb-19b0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.1.45:37103/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772838247, "uuid": "c736b4dd-19b0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sanct-v1.sanctunputer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772839089, "uuid": "bcf89126-19b2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.234:58860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772839268, "uuid": "27bd8f12-19b3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.170.61:57843/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772840049, "uuid": "f9558cf8-19b4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.96.26:58428/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772840230, "uuid": "659d6d9d-19b5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.41.188:52683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772840422, "uuid": "d7cbb43c-19b5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.234:58860/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772840468, "uuid": "f3446c58-19b5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://woo-point.gadowooing.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772840887, "uuid": "ed3024ca-19b6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://gadow-v12.gadowooing.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841078, "uuid": "5e94a28a-19b7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.48.123:48259/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841487, "uuid": "52bcdc2b-19b8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://woo-sync.gadowooing.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841498, "uuid": "5943d55f-19b8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.48.123:48259/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772811786, "uuid": "2b30f34a-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "102.33.47.44", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812024, "uuid": "b9451fd4-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.175.89.136", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772777826, "uuid": "195bef8d-1924-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.72.124.157", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772792345, "uuid": "e761d076-1945-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.2.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819045, "uuid": "122f6443-1984-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.127.226.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772835424, "uuid": "34bc2f7e-19aa-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.102.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772803085, "uuid": "e94562db-195e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.24.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772775785, "uuid": "58f473f1-191f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.160.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772784965, "uuid": "b8e0f868-1934-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.252.174.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772766065, "uuid": "b75bd71f-1908-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.150.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772807885, "uuid": "160ba50b-196a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.99.201.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772793906, "uuid": "8a2d8b07-1949-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.131.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772781065, "uuid": "a4782698-192b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.152.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772756586, "uuid": "a592ee99-18f2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.161.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772785987, "uuid": "19caf09c-1937-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.127.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772833445, "uuid": "995bfcaf-19a5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.25.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772792944, "uuid": "4ca0d37e-1947-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.157.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772797865, "uuid": "c20b3a3a-1952-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.178.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798107, "uuid": "51c5b564-1953-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.127.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805845, "uuid": "561cb32f-1965-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.31.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772817125, "uuid": "99ad8b1f-197f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.166.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798107, "uuid": "51c5ec29-1953-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.199.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772779445, "uuid": "de9dd830-1927-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.219.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772777046, "uuid": "48744eca-1922-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.35.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772763484, "uuid": "b550b514-1902-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.175.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772760485, "uuid": "b9813ff5-18fb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.183.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772787367, "uuid": "50a28352-193a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.244.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772805366, "uuid": "3905ef67-1964-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.133.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772796426, "uuid": "680c3fb4-194f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.86.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806745, "uuid": "6f02edca-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.34.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782038, "uuid": "e841fb42-192d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.17.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759884, "uuid": "533ff13c-18fa-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.186.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772779746, "uuid": "91db46cf-1928-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.231.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772762465, "uuid": "55a59924-1900-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.49.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764626, "uuid": "5e20f5bb-1905-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.136.4.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772793308, "uuid": "258fbd0f-1948-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.190.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808245, "uuid": "ec87f36e-196a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.206.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772783525, "uuid": "5ea9dd2d-1931-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.22.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772799007, "uuid": "6a4582f1-1955-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.234.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772824866, "uuid": "9f9ec272-1991-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.135.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772767926, "uuid": "0cca2139-190d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.109.200.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772813644, "uuid": "7f0ab76f-1977-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.165.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772764626, "uuid": "5e20e9f0-1905-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.172.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772779746, "uuid": "91daf9ca-1928-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.75.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772833745, "uuid": "4bc5236a-19a6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.151.156.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772772126, "uuid": "d3e2b086-1916-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.239.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772810886, "uuid": "12befffe-1971-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.223.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772787785, "uuid": "498f3b05-193b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.77.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772840045, "uuid": "f7334613-19b4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.96.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819526, "uuid": "31039e98-1985-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.230.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772838006, "uuid": "37e98766-19b0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.1.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772840225, "uuid": "626c2f76-19b5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.41.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772821085, "uuid": "d1cfa902-1988-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.78.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772763365, "uuid": "6e225794-1902-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.1.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772769663, "uuid": "182e53c1-1911-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.146.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808786, "uuid": "2ef7944a-196c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.193.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772773506, "uuid": "0aa059b2-191a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.5.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772773085, "uuid": "0fb7155f-1919-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.51.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772830325, "uuid": "557df4e7-199e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.95.22.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772814845, "uuid": "4adf2967-197a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.121.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772816225, "uuid": "8138817f-197d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.102.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772789345, "uuid": "eba0e362-193e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.168.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772774225, "uuid": "b7656761-191b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.33.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772809746, "uuid": "6b939158-196e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.58.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819285, "uuid": "a145d1a8-1984-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "140.233.190.114", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772817965, "uuid": "8e9cef04-1981-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "142.248.228.197", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "xml", "colour": "#75ec5b", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818745, "uuid": "5f58d293-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "142.248.80.139", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806685, "uuid": "4ab0c2c3-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.208.174", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772804707, "uuid": "afd9c316-1962-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.208.52", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772804707, "uuid": "afd95a60-1962-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.210.93", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806685, "uuid": "4ab12f62-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.211.100", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772804585, "uuid": "673364ca-1962-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.211.101", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806685, "uuid": "4ab10ca5-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.211.102", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806685, "uuid": "4ab1ebc4-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.211.103", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806685, "uuid": "4ab13be5-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.211.104", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772797206, "uuid": "392b3835-1951-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.211.222", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "DarkVisionRAT", "colour": "#9c821f", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788086, "uuid": "fd305e04-193b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "166.48.94.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772816465, "uuid": "103dea05-197e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.157.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782087, "uuid": "0567eeaa-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.190.153.160.host.secureserver.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772779866, "uuid": "d97d4371-1928-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.226.183.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808786, "uuid": "2ef59cbb-196c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.148.55", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818625, "uuid": "17b5f45a-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "177.76.44.91", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772804585, "uuid": "67334d96-1962-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.16.52.18", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806865, "uuid": "b6154e36-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.16.52.217", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806685, "uuid": "4ab1c609-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.16.52.44", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806685, "uuid": "4ab08ee3-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.16.53.82", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806685, "uuid": "4ab1c21f-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.16.55.63", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772800625, "uuid": "2f32d79b-1959-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.206.144.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812024, "uuid": "b941ef6b-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.215.236.81", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818865, "uuid": "a6afe54f-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "179.43.182.70", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772775006, "uuid": "89076736-191d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.36.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772779926, "uuid": "fd59d233-1928-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.197.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772775606, "uuid": "ee713ccf-191e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.186.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772833445, "uuid": "995bf79f-19a5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.112.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841065, "uuid": "56ed5fd5-19b7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.48.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812744, "uuid": "66660c32-1975-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.86.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772771345, "uuid": "02a6e0a1-1915-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.1.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772794145, "uuid": "1844051a-194a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.150.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772836084, "uuid": "be141994-19ab-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.13.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772794085, "uuid": "f4c455b2-1949-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.163.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772828885, "uuid": "fb203eb8-199a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.60.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772837645, "uuid": "60bab407-19af-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.170.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772824745, "uuid": "574cfdda-1991-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.192.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782038, "uuid": "e841fb9c-192d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.22.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772783407, "uuid": "182aebff-1931-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.119.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772779266, "uuid": "73d39c8d-1927-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.178.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772832485, "uuid": "5cdaf5ac-19a3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.69.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772833926, "uuid": "b7d2a546-19a6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.245.226.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812024, "uuid": "b948d085-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.198.234.189", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812024, "uuid": "b943d876-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.38.142.156", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812024, "uuid": "b9437a50-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.116.36.184", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782087, "uuid": "053ddd6f-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.46.217.187", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772821506, "uuid": "cd28c119-1989-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.35.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798045, "uuid": "2cfb9e39-1953-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.57.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772793125, "uuid": "b8be91fc-1947-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.17.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772778064, "uuid": "a7b8339b-1924-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.14.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772755206, "uuid": "6f3b9ffe-18ef-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.235.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772830806, "uuid": "74558746-199f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.155.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772821385, "uuid": "84e5a4f1-1989-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.206.193.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772815266, "uuid": "45bd45cf-197b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.182.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772809926, "uuid": "d6987065-196e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.114.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772789646, "uuid": "9ef37d78-193f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.121.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772817907, "uuid": "6bcacd0d-1981-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.231.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772776625, "uuid": "4db5433b-1921-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.33.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772834164, "uuid": "45c5c52d-19a7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.216.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772822225, "uuid": "79abf1d1-198b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.88.187.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772832485, "uuid": "5cdbb093-19a3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.89.61.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818385, "uuid": "8873d70d-1982-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.185.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772780887, "uuid": "3a1f6009-192b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "41.216.225.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772797808, "uuid": "9fde7333-1952-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.99.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772835844, "uuid": "2f3c0f59-19ab-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.148.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772804225, "uuid": "909dcb34-1961-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.195.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772800507, "uuid": "e889fcb0-1958-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.241.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772826185, "uuid": "b19e405a-1994-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.132.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772794265, "uuid": "604d88f1-194a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.44.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772767985, "uuid": "3026ca1a-190d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.254.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798286, "uuid": "bca52d18-1953-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.93.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772776326, "uuid": "9b525258-1920-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.142.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772810045, "uuid": "1d845745-196f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.169.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772836144, "uuid": "e228ec02-19ab-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.250.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772760725, "uuid": "488a3b34-18fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.166.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772773625, "uuid": "519f0a0c-191a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.171.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772768345, "uuid": "0674feb5-190e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.237.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818865, "uuid": "a6a475d6-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.128.118.48", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812024, "uuid": "b942cc45-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.151.155.223", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806865, "uuid": "b61547b0-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.156.87.176", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806865, "uuid": "b615083b-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.207.157.11", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806865, "uuid": "b614a625-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.66.228.176", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788746, "uuid": "864304e2-193d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.203.233.102", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772790606, "uuid": "db2828b7-1941-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.226.162.217", "Tag": [ { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818865, "uuid": "a6a37ffe-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.8.68.4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819346, "uuid": "c563a0a4-1984-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "50.247.12.209", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772777226, "uuid": "b3e323e8-1922-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.103.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772779926, "uuid": "fd59b517-1928-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.66.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788086, "uuid": "fd308fc3-193b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.87.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772768406, "uuid": "2acf327c-190e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.0.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772784604, "uuid": "e1c86c6e-1933-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.37.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772830325, "uuid": "557e076a-199e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.189.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772784485, "uuid": "9a7d2945-1933-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.141.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772757605, "uuid": "05024838-18f5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.254.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772829007, "uuid": "43f553a4-199b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.82.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772786407, "uuid": "148760ce-1938-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.153.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812985, "uuid": "f5f7120d-1975-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.142.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772796545, "uuid": "af02edbb-194f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.229.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772836325, "uuid": "4db7ee68-19ac-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.194.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782446, "uuid": "dbad93ec-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.202.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818985, "uuid": "ee6cc18e-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "74.0.32.141", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818865, "uuid": "a6a50e55-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.97.124.196", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772818865, "uuid": "a6a4c8e9-1983-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.234.99.20", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772812024, "uuid": "b9439246-1973-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.124.63.133", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806685, "uuid": "4ab20245-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.240.222", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806685, "uuid": "4ab18901-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.241.109", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772806685, "uuid": "4ab1de9e-1967-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.241.152", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808607, "uuid": "c463f61b-196b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.156.102.255", "Tag": [ { "name": "7z", "colour": "#f91abd", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "img", "colour": "#89ee14", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772777285, "uuid": "d71c53ee-1922-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.214.40.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772780407, "uuid": "1c25d9fe-192a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "abcgrid-0form.abcdesign.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772793845, "uuid": "65db2aff-1949-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "addict-veilcore.addictfear.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782087, "uuid": "0564cdcd-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "admin.hggg.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772756764, "uuid": "0fcac53d-18f3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "aero-hub.skysentry.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772792826, "uuid": "0626d523-1947-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "amp-winvector.amperewin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772774645, "uuid": "b1e861c1-191c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "aqua-sync.aquastream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772819826, "uuid": "e3655db6-1985-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "asteriaproject.dstat.click" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772826365, "uuid": "1d233bb6-1995-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "austro02.austrodouble.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772808906, "uuid": "76ced403-196c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bird-farm.pigeonbreed.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772785685, "uuid": "6614771d-1936-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "birdfract-sky.breaknbird.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772824445, "uuid": "a4fea64c-1990-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "blood-unit.dialectblood.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772825226, "uuid": "765b1a3a-1992-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "blood04.dialectblood.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772786346, "uuid": "efef80c6-1937-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cellculture.sdflkmicrobiol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772796845, "uuid": "620e5d43-1950-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "circleforge.rantiercling.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772783288, "uuid": "d1565142-1930-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "coachburn-edge.coachcoal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782145, "uuid": "281c4565-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "coloradoskitowns.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772784545, "uuid": "be8e66b9-1933-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "constell-1node.constellupd.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788685, "uuid": "6220a5c0-193d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "corvetx-stream.corvetfordata.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772792524, "uuid": "52935016-1946-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "currentflow.amperewin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772788388, "uuid": "b127d43f-193c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "datadrive.corvetfordata.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772797926, "uuid": "e6084eb2-1952-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dataplate.piittablet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772790785, "uuid": "45f386be-1942-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "denny-holdgrid.dennyportfol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772824625, "uuid": "0fe11b6e-1991-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dia-v5.dialectblood.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772831707, "uuid": "8d50930e-19a1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "double-sync.austrodouble.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772781127, "uuid": "c95f9769-192b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "down.wps-kdocs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772797085, "uuid": "f0d58c92-1950-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "esvpotfvg0.ufs.sh" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772799007, "uuid": "6a5552d0-1955-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "exitroute.dropout.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772776326, "uuid": "9b78d036-1920-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "f7ozu1t9.flogginquisit.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782145, "uuid": "281ce7d2-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gacorportbet88.space" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782145, "uuid": "28215ac3-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gacorportbet88.store" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772840885, "uuid": "ebf1501d-19b6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "gadow-v12.gadowooing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772771886, "uuid": "4510fe77-1916-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "hydro-run.aquastream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772836385, "uuid": "71931438-19ac-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "intest-v9.intesttop.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772774646, "uuid": "b2037fb6-191c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ip-2422.proline.net.ua" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772793007, "uuid": "72656445-1947-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "kvid5obz.awakepathog.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772781065, "uuid": "a48202f3-192b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "kz7v2.coachcoal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772794746, "uuid": "7ea1fa68-194b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "lifeline.proofsurvivor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772756224, "uuid": "cdf98c7a-18f1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "link08.organiclink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782145, "uuid": "281b88b9-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "lmconnectuserappaccesscontrol.online" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759884, "uuid": "534cae93-18fa-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "logi-base.trailvantage.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772790606, "uuid": "db45e41c-1941-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "lsvvpb8t.drinktide.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798645, "uuid": "92714257-1954-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "m2q9x.dropout.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772833326, "uuid": "520d985b-19a5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "mine08.minenrichment.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772821326, "uuid": "61a4490d-1989-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "moro-v4.moroshkasvet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772786167, "uuid": "856406c2-1937-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "n4qx7.sdflkmicrobiol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772796125, "uuid": "b49fc612-194e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ochech-lockframe.ochechstop.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772755446, "uuid": "fe0bcc21-18ef-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "orga-sync.organiclink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772809208, "uuid": "2a854a86-196d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "pigeon-v2.pigeonbreed.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772798347, "uuid": "e1561978-1953-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "piit-tabvector.piittablet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772779507, "uuid": "03bc7b19-1928-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "pixelcraft.abcdesign.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782145, "uuid": "2822e38c-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "post-host.screenconnect.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772794986, "uuid": "0d9472d7-194c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "proof-anchorgrid.proofsurvivor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772837765, "uuid": "a7f0bc91-19af-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "put-vault.sanctunputer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772793425, "uuid": "6b4f526c-1948-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "q7mxr.addictfear.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772783646, "uuid": "a6b2c17a-1931-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "q9wm4.constellupd.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772796486, "uuid": "8ba9f7bd-194f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "r8kqm.rantiercling.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772797206, "uuid": "393b9ef0-1951-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "rantier-loopnode.rantiercling.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772833685, "uuid": "2829249b-19a6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "rich-flow.minenrichment.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772832485, "uuid": "5ce86509-19a3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "rich-v7.minenrichment.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772778064, "uuid": "a7c82063-1924-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "rx8qk.abcdesign.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772838245, "uuid": "c5fe36ed-19b0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sanct-v1.sanctunputer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772791746, "uuid": "8251552e-1944-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "scene4-render.fourscene.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772757545, "uuid": "e11cafb2-18f4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sent-v7.skysentry.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772759524, "uuid": "7cedd626-18f9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sent03.skysentry.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772758386, "uuid": "d6598686-18f6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sky-gate.skysentry.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772799126, "uuid": "b155fb3a-1955-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sqddakti.awakepathog.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772783945, "uuid": "58c8c648-1932-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "starvector.constellupd.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772773506, "uuid": "0aacd4b5-191a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "stre-v9.aquastream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772777046, "uuid": "48852577-1922-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "stre06.aquastream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772790606, "uuid": "db3772cc-1941-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "stylemansisforeal.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772822167, "uuid": "573944d9-198b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "svet09.moroshkasvet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772797565, "uuid": "0ee1d49c-1952-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "t5zw3.piittablet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772785025, "uuid": "dcb9cb20-1934-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "t6pzr.breaknbird.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772834285, "uuid": "8da2fbe7-19a7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "tank-gate.representtank.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772835244, "uuid": "c9bbc631-19a9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "tank05.representtank.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782327, "uuid": "9442d14a-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "teamforge.coachcoal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772836084, "uuid": "be268f5f-19ab-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "test-top.intesttop.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772768045, "uuid": "53c8430d-190d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "trail-net.trailvantage.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772794206, "uuid": "3d0026ef-194a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "v9k2p.proofsurvivor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772760668, "uuid": "26959038-18fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vant-v8.trailvantage.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772770745, "uuid": "9d1abef3-1913-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vant05.trailvantage.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772791565, "uuid": "17004c2c-1944-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "visualstage.fourscene.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772789826, "uuid": "0a55dc50-1940-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "w3x9m.dennyportfol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772785207, "uuid": "48c4b712-1935-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "wingflight.breaknbird.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772820845, "uuid": "4337c376-1988-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "woman-flow.youngwoman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772840466, "uuid": "f1d31b9c-19b5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "woo-point.gadowooing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841485, "uuid": "51494e1c-19b8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "woo-sync.gadowooing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772795345, "uuid": "e4061110-194c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "x4qzt.ochechstop.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772792345, "uuid": "e779038a-1945-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "y7qz2.amperewin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772786886, "uuid": "31ff5228-1939-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ygzulpfl.floatmurta.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772810766, "uuid": "cb9321d4-1970-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "young-site.youngwoman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772820545, "uuid": "903890c3-1987-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "young01.youngwoman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772787966, "uuid": "b5aa2b3f-193b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "z5qtr.corvetfordata.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772797206, "uuid": "393a8c9d-1951-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "zifg62sw71.ufs.sh" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772782145, "uuid": "281fac13-192e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ztscym.pages.dev" } ] } }