{ "Event": { "published": true, "date": "2026-08-24", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-08-24", "timestamp": 1787616931, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "57af77ed-e71e-4741-a7b3-e4ca265c620c", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d540e3d1-9f50-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787530494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787530494, "uuid": "b6e48f4f-be12-4b96-9f69-f7a27747d0ab", "comment": "Malware payload (Mirai)", "value": "8467c01db0c4e30bb9af3639ede48e81", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787530494, "uuid": "34bccc05-920e-452e-8d4c-2f224202dd79", "comment": "Malware payload (Mirai)", "value": "8a640912022d829a62612042935a6ba20f13e0b95a535cb4866ae0b091c62d51", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787530494, "uuid": "427fb9c3-3651-40d3-bbd9-788adcb7ee24", "value": "T1C5B3E085B210AE56C02672FCB1870A80D3B16D7B4B9A150B44B3F5B46DBCCD47E1AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787530494, "uuid": "238782fb-ccc3-4367-9df2-5176f13bfb2f", "value": "3072:15Apzl9NOvXoVLAE375lhYy5SkOXNwu/:sevXCLr59hmNwI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787530494, "uuid": "ea48cb7c-0c1f-4729-8007-73168a21d9c2", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787530494, "uuid": "3d2cf459-08bd-4014-a2d8-eafad3d6083a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1787534178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787534178, "uuid": "85af912d-4e29-4a49-9424-455355cec103", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787534178, "uuid": "467b477f-47e3-4b81-8314-c44d1552ac0a", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787534178, "uuid": "b599034b-30a1-4000-a91d-80e3207c5ffe", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787534178, "uuid": "2ab2269c-17b8-431d-b663-b876aacbf90b", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787534178, "uuid": "41f2502f-a7b0-4de0-9b7b-1217195dd607", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14d0a66d-9f5f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787536614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787536614, "uuid": "47a9f810-f5ef-403e-a7eb-c3472ee58a33", "comment": "Malware payload", "value": "524123cf39fc933355f25097b6f08ab4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787536614, "uuid": "7c0b90a0-2e1c-4649-9fa9-2136cb7a60b4", "comment": "Malware payload", "value": "c3618a087bf406729d21ee45f00a82fa32c134374e3b64841b51fd039bbe0b40", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787536614, "uuid": "1a57309d-8566-4137-8100-0ff8b154bb08", "value": "T11C93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787536614, "uuid": "9163adc6-61bb-4d37-accf-5f91b4aad82c", "value": "1536:dap9kuEEwH8kw0PMqpYJKNoE+pTYeGf8BqLv3Tli0oRGpNuqYPPXBIH8LutVWw:MIuEEwH890j+pHBqv3Tli0oRGpNuqYPM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787536614, "uuid": "04603b1b-28f0-4ef7-acd4-5c74fcdb3100", "value": 89613, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787536614, "uuid": "8c7e9908-11f7-4292-a531-8ff3a56ce782", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4b384cd-9f60-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787537285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787537285, "uuid": "1aae121c-d456-4644-952b-f48d275fd729", "comment": "Malware payload (Mirai)", "value": "568c41d403bfe132bf852cd72e048784", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787537285, "uuid": "8d91108c-ff5a-4512-8885-cb4575e94ce1", "comment": "Malware payload (Mirai)", "value": "07ecd27fdb601292e1ebd8ff88f4c5360bc8c9f3bc1a5ad7d389efa865e58d44", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537285, "uuid": "175b4023-6eec-40c3-951d-c5ef39b5705d", "value": "T14724AEC1721C7EDFE1832D7D860955235C0CAE12E8039B9261FD6A47DA7BAE30FB99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537285, "uuid": "e9ade991-9063-425c-80ec-a09ec57d0a1d", "value": "6144:uCWEBesWl+cJvAC3uVfAlVZ/kYVdaBCUvFFlJXsPH:qSeLAemYPlajFGPH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787537285, "uuid": "70c4fc4a-e412-437d-8593-d71c0e1ec8fc", "value": 216236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537285, "uuid": "3ed3c2c2-2388-40ea-9f01-0cbe7eedfc2f", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1787537358, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787537358, "uuid": "31b23a73-dc70-4440-a909-410f1a8599d0", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787537358, "uuid": "df14a522-9743-41ce-9dd0-5113c10f854d", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537358, "uuid": "ce5746be-fded-46d1-9452-b42d55aec035", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537358, "uuid": "4fc83938-2781-4a2e-b64b-87209d136a52", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787537358, "uuid": "4cdd3e36-910e-49e2-9692-7e1067038c06", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1386e64-9f60-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787537360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787537360, "uuid": "daf20bab-5ecd-4dde-ab89-c8b8e895533b", "comment": "Malware payload (Mirai)", "value": "59b8244d671888094fd4d03a5e1f460f", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787537360, "uuid": "c0d17787-6b85-48a4-9bbd-988515498694", "comment": "Malware payload (Mirai)", "value": "a2232cd0627028b5dceb4deb513f885d9dfef0fe5ef52ed9a006e9c69834031d", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537360, "uuid": "b9580771-868d-4d0c-8fde-79308bb48afa", "value": "T1FB9302972B3EBCE0E83302B8D2A549CAA7EC1445E59F83751DE4711E92B20CE5E257", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537360, "uuid": "4566d731-d3f8-4c46-8845-078e3937fd20", "value": "1536:gMPVsIDtgKyQ0O0PcCZOolZZIsxGK3N0mO3rtvfrtJNXsLO1u7O8XT:gMNzge4PcOOUZZD/0N35vfRJRsLOIOC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787537360, "uuid": "869fb5e2-eab6-4efb-a29c-5f571c7301cc", "value": 95428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537360, "uuid": "7ae87018-465e-4990-9916-ad9542e6ce90", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4679ce7-9f60-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787537419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787537419, "uuid": "b34d995e-b42c-4f5a-a78c-90a392e1c724", "comment": "Malware payload (Mirai)", "value": "77d527197667f9ebffcaab86b23764a3", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787537419, "uuid": "500d0d54-fd5e-4ebc-bd8d-0857be36dc64", "comment": "Malware payload (Mirai)", "value": "8e43add0886d834e856cdbda15be486bfbb368359d21cf8d3550bc854978878a", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537419, "uuid": "1c3f02d5-3982-48f4-a00c-149a3d9690c5", "value": "T183B31295280F84F2E46BA2795B1C0EC1CB63E6F21890B5437876DEC99C45ED030967", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537419, "uuid": "b25d7fc7-e8ac-4ede-a763-5f1399ef8470", "value": "3072:BE0Vn0kzmFunZwQRHkZM4cIGnPPCs9b+r/mcyYUCagV1sn:W0Vn0kiFuZKEPlxYTfam1sn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787537419, "uuid": "c4589087-bad9-4621-892e-b5b681f78202", "value": 117404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537419, "uuid": "6523bf4b-d1da-402d-a240-3b76191b1f90", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f71ae500-9f60-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787537423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787537423, "uuid": "1481ce01-8c67-4845-9537-89a71ba9bcce", "comment": "Malware payload (Mirai)", "value": "5383fafb2a59cb9cc9adaa9b33d955b4", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787537423, "uuid": "6fce250d-d948-4cd7-891d-862ce7f35982", "comment": "Malware payload (Mirai)", "value": "d59b4af4b28f7afdf09b74283360075f07d82f56fd91d0f66870e914c06886a6", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537423, "uuid": "2c2aa34f-1613-4656-a969-9220ef1ae7b9", "value": "T1DDD312AC4D4A4F67FDC252B7E420C71EB06063BE1BCA4BAC5B691FC07925567E3906", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537423, "uuid": "154304fe-d190-415d-904c-6c2bc14ada99", "value": "3072:8NwRzIOrjSf2aefnwoJFf7Fr9xThx7fmuCn/yqVh/cI3TR8fzCi2:8a5IOrjSOaGwIN9Vfmu+/ya/Byzo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787537423, "uuid": "b481e0c9-b441-4094-9b15-a4075e45d186", "value": 140060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537423, "uuid": "04a4d4d7-5c15-4a11-85e3-60fa85dc63a8", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29abcffc-9f61-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787537508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787537508, "uuid": "5da431a2-2948-4897-9836-1bb1b6083b5d", "comment": "Malware payload (Mirai)", "value": "e7d717bde2b246e68fdf51a685788664", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787537508, "uuid": "0ae2a712-643b-48ad-a264-f1e518d902e2", "comment": "Malware payload (Mirai)", "value": "04f4e5f85150fed08b3311c793d0ab8838d1c55117086e6cd0290bb0b2554c93", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537508, "uuid": "7eae9369-8921-4ed7-a8ba-502679743014", "value": "T1EE830223090E7071D8B03C39B67695117C06C6A3A67C7D55F04AEAAA53D02BD9CF8F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537508, "uuid": "8da14efb-46d0-48f4-9477-ed6ab7006fea", "value": "1536:kSb722VEtZcd+hzth1rRBa/YaXfp0tVhjw6PFAf5:kE722VEtioJhTo/YaXfcDjRSR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787537508, "uuid": "816edc10-e314-4027-9c23-c7b3b9c43bd1", "value": 88392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537508, "uuid": "46512c1d-b959-47ce-8629-67b2560b6262", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31b9414b-9f62-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787537951, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787537951, "uuid": "11c01443-7dcb-4342-8c34-40ffa3c1269a", "comment": "Malware payload (Mirai)", "value": "0e390c0672ab53e60e9637af6873da80", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787537951, "uuid": "b52710a5-df06-4b04-94bd-27172e1847a1", "comment": "Malware payload (Mirai)", "value": "415c91ff2b7098268f56db653448aa5a5ac7db9692e58b997b721a83bc3b8e6f", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537951, "uuid": "0dc6b328-7e61-473f-9c60-d4436aef407c", "value": "T154D312DC7A4192DCF0E382292D8085A52D87CA7E5EB527F27B44E54818C7873E56E0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537951, "uuid": "151da9c0-9f1a-4d6e-a35b-15dbc8ef8483", "value": "3072:8HawO8VWmSa2yags5Z1aph2ENhOdqKjwjeuIX8/oEOEnz4Z9h0A:8q4zJ0gs5ZI8MEjwjeuIXQoE9niB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787537951, "uuid": "245692f2-7335-4c97-aeca-461f9ff09da2", "value": 140004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787537951, "uuid": "48323cc4-8c6f-4309-8a73-ed469e89213d", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a19b38cd-9f63-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787538568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787538568, "uuid": "c605e2dd-4ca7-4e5f-9664-1979de698d7a", "comment": "Malware payload", "value": "a0fbb8d89a25da731096991777c62161", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787538568, "uuid": "fc937c54-c3fb-4ea9-8534-a7737100d59c", "comment": "Malware payload", "value": "83eeb01ef8dc15f143a912048b4dafb17451148eaa91ebcf12d37eefd2e9149e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787538568, "uuid": "c9f45f5c-555a-4838-a33c-e026bf87da54", "value": "T1D2F3E85EBBB23276721B8309FAC1B768916DC153EA011EE7BDB5F118CBC229201736", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787538568, "uuid": "c54c4586-8b37-4378-a140-94a2dbf97ff1", "value": "1536:japAr5lURr4kjofmmkWl0Fr/vqLBavZWkOA4YKhJgTnUX0vZI:Gd4kyA4pJgTtW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787538568, "uuid": "a80441c4-33b2-44ab-aa90-d9363b4b6ffb", "value": 157652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787538568, "uuid": "d4d42f8e-41ef-4606-8cc5-8b0de073b3da", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d683450e-9f63-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787538657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787538657, "uuid": "b41bf593-c6fd-448b-bc48-c0838c7c6fac", "comment": "Malware payload (Mirai)", "value": "bab50a1e788deb4753a8c2e519976cdf", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787538657, "uuid": "e2d51bcf-5b62-408f-8c3c-389400e97f8c", "comment": "Malware payload (Mirai)", "value": "e2c334f483fc20d52e55da2f613d9103fa02a6751f33922e54cf504785f904d8", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787538657, "uuid": "8cfb278e-5ec3-412f-8704-ecbba4152de8", "value": "T1D29302078EE9263892D865710D7FEC6B180083CE6FD61ADA57F828B145A9BFF1F443", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787538657, "uuid": "7915df12-4fb6-46dc-9a65-041c476b8638", "value": "1536:xoPhAoAXUe06OdEr+Kr2OsuHC0F17xtS0n1NGEP//micAcnvvE3EF41DLZxnouyC:xuAoAETErxti0FVzFGPAcvvE3p1txour", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787538657, "uuid": "2ff7e520-bd74-4272-a219-133071bac397", "value": 97276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787538657, "uuid": "82430508-de93-4d18-b446-caeed3d7ed4e", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be6b74de-9f66-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787539905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787539905, "uuid": "c51d3412-5bc3-49ef-bf65-24e440a38ccf", "comment": "Malware payload (Mirai)", "value": "97811e532f64bb65ea81b9ac5b281b00", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787539905, "uuid": "03c28157-6d6e-493d-99d7-cacded52e659", "comment": "Malware payload (Mirai)", "value": "ccdc4a015bb2a334f7ed236b6b8ba4f40eaf66208e62d09b20a73f99fab1df41", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787539905, "uuid": "87440918-4874-4c5b-b761-575ec370bc2f", "value": "T127B302CDB3849F62E8555EB72E06E1D4F744CBCCEA775CC18A830905BA10A39ECD2E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787539905, "uuid": "9acb2cba-4f94-48d5-b9c6-8809fbbdbbce", "value": "3072:rVC5HsgFWpa8hmyf53d6YqKkDgXiPxGNK79vTU+4u+qgwR:rVC59FWQ87f53QYqSU7do0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787539905, "uuid": "4b809841-1200-4063-ac88-cd08947c962f", "value": 111540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787539905, "uuid": "47ff75f6-009f-44ab-942b-4799c8734102", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1787540171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787540171, "uuid": "48d4d683-feae-48be-ab72-a9f74a084f2e", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787540171, "uuid": "002d5346-2c20-47bf-998f-72226fc5cc83", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540171, "uuid": "749c1480-90a8-4504-8b6f-60abb04111ba", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540171, "uuid": "f2759592-c321-4a43-9e42-a6e6f8eb5813", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787540171, "uuid": "c5b9a96b-7f7e-45cc-a7f8-f1fd0a60b5ff", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2b345d8-9f67-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787540288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787540288, "uuid": "5948be8a-7676-428b-a735-3c46a8abcd2d", "comment": "Malware payload (Mirai)", "value": "85847bcab089a278bb5b34dede451c5c", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787540288, "uuid": "769b0a94-6282-4c6f-9173-5fa82e4098b1", "comment": "Malware payload (Mirai)", "value": "4bb8b380fa4377b7baddc6fee6ed312e2e3c1489825aad487f5b9c3a11919e78", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540288, "uuid": "aaaa4f25-359c-494f-b2ff-d8638e19b484", "value": "T1CD8302225C0E7171D8F12C31B2269211780AC672E76C38597446EA9753E12FDACFCB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540288, "uuid": "2ac0baa3-3060-4941-984f-e04cb68f40b0", "value": "1536:kSb722VEtZcd+hzth1rRBa/YaXfp0tVhjw6PFn0Fjanfb:kE722VEtioJhTo/YaXfcDjRt0FUj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787540288, "uuid": "f67baf22-fec9-4ff9-b9e5-2f6395ebd41a", "value": 88392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540288, "uuid": "48591746-9ccb-4230-8c12-a64cc49578c7", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec2d9d33-9f67-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787540411, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787540411, "uuid": "91665b83-4425-411f-a123-7bcc0daf8d27", "comment": "Malware payload", "value": "a9d1ab21d0161a71aadc22ecbbed9262", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787540411, "uuid": "998eb6aa-736d-4469-867d-03e1716aa2eb", "comment": "Malware payload", "value": "ffabe4cf023448996495e7f08936584323bda66a9ca9bdf680667f3758d9e84f", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540411, "uuid": "c796f741-ec08-46bf-8ede-29ecea7de734", "value": "T14EB5CFF7D0979E87FD19D4F2416403E1BC222A4649655328B94DBD087D4E8BECBA8F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540411, "uuid": "b5bf371f-fa24-4373-a3d6-503d5a19fd09", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGf2AirVohBsggH:8UixbItdTrJoFVPMvXGuAqohB3GKMbB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787540411, "uuid": "8515bbe9-36e7-4d12-a0d4-f9bff7be28af", "value": 2481661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540411, "uuid": "db0e9c52-a076-4c30-ab53-cafa5f2afd53", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd798a27-9f67-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787540440, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787540440, "uuid": "7ad00371-fa2a-406e-ad7e-19282c248ab7", "comment": "Malware payload (Mirai)", "value": "db10f2d9a9f84a7330bf5344d4d83bfc", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787540440, "uuid": "c1ec4368-1367-4d88-8524-94e017b6bbb1", "comment": "Malware payload (Mirai)", "value": "2d35e56e6696dc96cdefe099424ef6432a145f8f7add13ddc0b866c5d8243efb", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540440, "uuid": "4c298d69-6569-40e3-8af1-21a5b57bc210", "value": "T1AB830223150E7161E8F11C39F229D1157C1AC161E7683996F04AEAB953D02FCA8F9F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540440, "uuid": "f60a0f40-4931-40a0-8812-58f1b5d6169a", "value": "1536:kSb722VEtZcd+hzth1rRBa/YaXfp0tVhjw6PFUPbyyL8jf0:kE722VEtioJhTo/YaXfcDjRmbyyL8jM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787540440, "uuid": "95a1fcc8-e2d7-49e8-be3e-2a8dfd26bc4a", "value": 88392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540440, "uuid": "611c40fc-d794-46c8-ab24-635247603ff3", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f942f5a-9f68-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787540471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787540471, "uuid": "5873954c-8afb-412b-b188-de3885a6d4f8", "comment": "Malware payload", "value": "cd38fbf81b8e81a4aa8f70395b0d8cae", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787540471, "uuid": "07bf549c-40b4-41aa-8b3c-aa222f3860ac", "comment": "Malware payload", "value": "eded94d49ce63a19928946ffb9bb7117ad249a9b679f4f90435a03b0184f9614", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540471, "uuid": "e984c2d3-6fde-4259-8848-baf5194e32d5", "value": "T1A404DF70B062BDEBD54145BB1038E47402419D701B6366A5F59EF3EECBA26E13ECD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540471, "uuid": "f281e6a3-27c0-4e3e-8a0a-78f56ff2ff4a", "value": "3072:mjmPoNChIJrtygAaZgx/mUIsIi074XF03PZaiW5rOGltBA1De1:LgNbJrtvZUT1CZaigBmC1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787540471, "uuid": "b16fd1a4-d6e9-42ad-adfa-9d69aecdd548", "value": 188851, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540471, "uuid": "32415c6c-bfa6-494b-b24e-f7acb51b2c4a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a42abe68-9f68-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787540720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787540720, "uuid": "286e6d43-5af3-4533-b0ef-1a83e742b0da", "comment": "Malware payload", "value": "c435c543c708e2267d26a8d1e0675431", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787540720, "uuid": "4cc37869-cc83-4f02-a846-2a0b3d414443", "comment": "Malware payload", "value": "1de24a530e07d6458e478c7e8b4329fbbcab51fb85d399bf43ca392cacdb9e26", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540720, "uuid": "69f090f4-1de9-487f-928f-d069bae36bce", "value": "T139F3E85EBBB23276721B8309FAC1B768916DC153EA011EE7BDB5F118CBC229201736", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540720, "uuid": "6ebd5719-9635-446f-b2da-a14d8ea0d889", "value": "1536:5apArYlURr4k3bpnIPMAyCJ/Wg+jrF0o1iF4B3hYTynUX0vZI:Ym4k4F47YTytW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787540720, "uuid": "5456d780-2a0e-4ad5-b391-0469ca1afea7", "value": 157603, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540720, "uuid": "e25f9639-3a52-432f-b29c-0144f4ad4aec", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "446cc08e-9f69-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787540989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787540989, "uuid": "6316be54-074d-4e1a-9845-10a36e4c67cb", "comment": "Malware payload (Mirai)", "value": "7732c5edaf32ce1f4527a54712a8c43a", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787540989, "uuid": "de020baf-61ca-4a2f-8123-8479c5ba0920", "comment": "Malware payload (Mirai)", "value": "bb7d7c7f6dd3c346fb58a182fe62e5ff4e34b02efe8b13d686d98bf9adb575ce", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540989, "uuid": "3c9dc42c-23d4-474b-9e8c-b7f2481f023b", "value": "T1D88302810A19DCF4C0FB753BFE5656919B049FB4A33370F0652AA9807E618FB17B60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540989, "uuid": "01bbd8ab-6452-45bb-a7f8-a4fcad4a34ea", "value": "1536:D7JFmTfIiqP4nhugNxJOKp071RHQpTb7FSNxrpJA9ECspB4Ef7:D77kIiY8hugwQubwpRSNxrcqtpB4ED", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787540989, "uuid": "e6d2c900-c846-428e-9d87-8478c9b6f7a8", "value": 88120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540989, "uuid": "976a7ca6-1273-46ba-8ca0-5ccec047eb5e", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46f9e064-9f6c-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787542282, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787542282, "uuid": "9869c32d-6247-4817-ba93-0bd27c8c919e", "comment": "Malware payload", "value": "4261d09d972832e3e0265cb44ce345c4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787542282, "uuid": "7929c000-32f6-42cb-a938-7e2c89033701", "comment": "Malware payload", "value": "a7f4fedcea3abe8987508d00f29834b8872e4e4e5059159eb19460d474b37cdc", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787542282, "uuid": "26dc62be-1441-48ea-a6f3-d8329a2b48b2", "value": "T15E83A622784559B825CCDE6C49FB5C502739800BCA0A2D2CF05EE5D83F76A78F5F92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787542282, "uuid": "8b303cd3-65cf-4455-b51d-3dcb4d843eb6", "value": "768:moJjXKfWEDcQPyT9r86roAhF46UwsdWA+7j1waEo604:mOEDcQPyTuvb6jGuRwaEo604", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787542282, "uuid": "bb509979-93ab-4c89-af3b-a3ea4b9ae6c1", "value": 81334, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787542282, "uuid": "96568275-96bc-4059-ab36-fcb446fddac0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edfffc36-9f6e-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543421, "uuid": "a9a4495d-ed54-4694-9270-c8e9c6703b83", "comment": "Malware payload (Mirai)", "value": "25968c6172db6bd7879e56d846ef5fb1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543421, "uuid": "d98c2668-a7cc-4588-9bf1-9b575233b00d", "comment": "Malware payload (Mirai)", "value": "f02b8476bc0e5a38f364da103f1583b17c2742361f46f5640d161092e35a1bd4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543421, "uuid": "6136f9af-500c-4951-8dba-7fbb870821c8", "value": "T116934C02BB1A4F43C0AB29F01B7F2BF097D5BDA518B4A4C4751EBE8943B19F16047E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543421, "uuid": "fb4af422-f4fd-44b1-9eed-f3bf8a909269", "value": "1536:GHV4qyijmHZfLy+o0NGlYq5bY1sBJxIz6tq5ZW2bmd:mV1yFtysfqdYAHaWvd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543421, "uuid": "6795ac42-8f79-4320-93a5-16e3b9264b23", "value": 96812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543421, "uuid": "33b4f662-48d5-48f0-8fc1-28cad37a4811", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25a00e9d-9778-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543421, "uuid": "44c337e9-8b94-4c8f-abc6-dcba227063ee", "comment": "Malware payload (Mirai)", "value": "4b8edfca2797be6aa6a56f48d80bf29e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543421, "uuid": "a5f4c93b-f326-4a54-99b9-1df4f84ebf8d", "comment": "Malware payload (Mirai)", "value": "b1d28add138e87822668e24e78f67dab743c06d87fe4a9754f28e18ffc0031e1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543421, "uuid": "e465b18e-2dfe-4377-85bc-ff2218f615fe", "value": "T117834C42731C0E47C17759B42A3F67E193EE6AA021F4F688355F978A9271E321186F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543421, "uuid": "792a31a3-932b-4ae2-ada2-1707b067a815", "value": "1536:qLAbwJVJuUcov4OxcQa7Ee8SG5qSBUmJP9n2c0DGR4ohkd:qxSodrj4hmSczGd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543421, "uuid": "ff176ada-c3b2-4025-b3fb-c8d00ffb8020", "value": 83448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543421, "uuid": "1cc44ab5-873a-4736-b695-ed9a655a6a1d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee14339d-9f6e-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787543421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543421, "uuid": "de5b44a8-16a1-4b98-96bf-d2779c8dfbe5", "comment": "Malware payload", "value": "780f365fe0efc77e1b8eb2adfe08c0b4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543421, "uuid": "7f0c138c-0f82-471f-b6d1-e3ef17856fe0", "comment": "Malware payload", "value": "a05c09bb81aae3816a243b6dc7fa16a72a5fb94437d019025b30f6161a23758c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543421, "uuid": "cb0e58c1-b9fa-441f-83b2-f3702586ba97", "value": "T1A2D49E23F9A02938DD9EC43043CE45B65776F4250756B5E707A0A6313D62EE3AB3BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543421, "uuid": "da7e0107-7f65-4d7e-ad13-7f5d8af7fb50", "value": "12288:eJGHyWs/1eOzeVDz19LMR8BZUp1VdaqNTysWShfjJz:rHyWsUWeV19LMRmmVd/NGi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543421, "uuid": "44d2a4d7-33b6-49b8-bfa3-d0f134696c15", "value": 631768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543421, "uuid": "08f6ac12-b592-47f1-b7fc-4954bda082eb", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24902fa0-9778-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543421, "uuid": "76a792ba-5c6a-4b9e-91ca-e93a6b89982d", "comment": "Malware payload (Mirai)", "value": "15d03c3d0f47e05ff8f6a204afb2ae5e", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543421, "uuid": "5a576b4e-4603-453e-a1bd-c3ad0f29d02b", "comment": "Malware payload (Mirai)", "value": "6285498d05dd12dff276b0d60430b727448d6b79224015cb3674c179d70200a2", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543421, "uuid": "14e414cc-e6da-4723-b8cc-e87b85a95d11", "value": "T160832A81B8825613C6C012BBFB6E428D772717A8E3EF72079D266F21378785B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543421, "uuid": "60bd02db-90d8-461b-8a06-f16bcb94f579", "value": "1536:hKhM5ixXmeyb4fl4k34V+PVvP5sDcggQrvHbhFRQi:hKhN9flVs+PtPWDcghP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543421, "uuid": "2f215bc8-97d2-41de-bb46-0d8bbc5b6dc6", "value": 83752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543421, "uuid": "b9289879-d7a8-4307-9538-7c0b6090e78a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "259cf807-9778-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543468, "uuid": "d3e46f52-8ab6-40ee-a6d3-2bb5bd2bf203", "comment": "Malware payload (Mirai)", "value": "2515a20bd6b3f82863b941529b2f2537", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543468, "uuid": "84d21db8-cd97-46f9-bda7-aae9e046b100", "comment": "Malware payload (Mirai)", "value": "a129b617f2909c5727aff206e4c10e6fba8a3243441ff9d5bcb45ff9712b911e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543468, "uuid": "5103c0f2-bd77-46d8-839d-02f573b7f581", "value": "T1E4638E73E92AAD58D1948970F4B58FB82F63A5108A5B1FFA0A95C175D043EECF2053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543468, "uuid": "503bb29f-8241-4cfd-8398-2671480b7a17", "value": "1536:pWwtuOBFcrSefg/jhiPDvLK32ZU73MXFnDCFanlMS7:pWaB6rSq0gu3vAXFnDVnKW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543468, "uuid": "18e786e3-a7fd-4b84-a478-3de059d2fdc3", "value": 72072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543468, "uuid": "d3950fc2-0b62-488a-b6a8-707ccb429cbe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "247dd99b-9778-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543473, "uuid": "a43cbe94-b601-4594-a1d6-f65cee0bcb47", "comment": "Malware payload (Mirai)", "value": "f7f1dc09f6a672aca0c9b4e7248a1bde", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543473, "uuid": "7b609b19-0d08-41fc-8262-f1360b57b964", "comment": "Malware payload (Mirai)", "value": "38e726afc0cefc86fa655c2ab69b3104356d0670f3a74f6dd53ba552b1b7a725", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543473, "uuid": "7a1708cc-9571-4163-a69d-918963d5d4bc", "value": "T1F2733A81F68BC4F5E85748744037F33F8B32EA298071C66EDF69AE36CA6364291172", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543473, "uuid": "4100b016-e41d-44c2-8b75-60dc34706aad", "value": "1536:beRiDIILdIijxxSR5QbRLqQAeWtaMueVzCShiJaGaCHTx+sS:beRiMILCi+R5QbRLqQCEM/VuOiJXa2/S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543473, "uuid": "992cf27d-1df3-41b9-94bb-c651b2ee832a", "value": 74932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543473, "uuid": "c202b700-580d-48bd-a6e2-764b0854600a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d2d7a08-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787543473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543473, "uuid": "0bffd50e-5763-48fc-b812-8410a2434cd7", "comment": "Malware payload", "value": "60399d5026c7a01a9bbe17a4038928e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543473, "uuid": "857615a4-440d-4e5a-b192-273a9ea9110c", "comment": "Malware payload", "value": "554206748472a39920ad95a26b6c217ce65439fd58d755a0f05457b3cbfbb57f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543473, "uuid": "3f7b1c70-3ce2-4db3-a8e5-9787967d87be", "value": "T134065C09FF65691ACD29C672EC7F13AA3330F54D22175B2B664EBA3078A31F55E427", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543473, "uuid": "4e66597c-e84c-4311-a362-fefdcb417508", "value": "24576:74VJv02iibCyYwo2vo55/Z43h6fHyJqOcBrexHhdgBgZ/KPdlQEl2c+jMxBze:cVZ02dg2vo55+wHynHhdvyKqVx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543473, "uuid": "9f61fac1-75ba-45d2-9024-df17ee0f54d1", "value": 3714848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543473, "uuid": "931957ae-aeb9-4ef0-80b8-f50d6f51afd2", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25a9bb63-9778-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543481, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543481, "uuid": "9f28c5a4-d346-4cef-8d2d-e1a5c29f3d6e", "comment": "Malware payload (Mirai)", "value": "fb36891698fe2b39c01880d38d0cc2fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543481, "uuid": "b564a47d-ac06-48c9-a29a-92e457df61f2", "comment": "Malware payload (Mirai)", "value": "c5c773ebcc22bb2557d39ac0c7a841f5029987b0b465738c3b3b047b576060f7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543481, "uuid": "755b6a90-7bf3-483c-80b2-c941fdbc83c2", "value": "T112934BD7F800DDBEF80EDB7B44570909B671B76106830F366357B967ED321A80A66E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543481, "uuid": "c25e6286-cf1d-485c-a168-cebd5fd3808a", "value": "1536:XIrBSmOvjZuSxwjgMLE1Mwc8Ft4p/L0G/fVDl3YnPBds90v2UY1Q:XIrMrZxIgMw1MwR46GvoU0v2/1Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543481, "uuid": "ee3ebaaa-3e55-411b-b402-56dfe71749dc", "value": 93240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543481, "uuid": "5df7c0d5-b426-401d-99cc-af04c87486fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14b7bb1e-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787543486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543486, "uuid": "907b4d2d-b6a7-4ef4-9238-9953fa2faf39", "comment": "Malware payload", "value": "bac9095bc742e43e54c0cf10ca927610", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543486, "uuid": "2bd721ec-4671-4f3d-899c-da4d91f833e7", "comment": "Malware payload", "value": "ade1f7e98fb2922406c5b483555873e94ab6ca9f60dd5615188bd47f8be58442", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543486, "uuid": "ee33947a-8776-47f1-b452-2d4f9f1fa72c", "value": "T19222E78F3586B223E991B078C09A6611971A106776214373755D987E1FCF934F0B1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543486, "uuid": "31352e19-a7e3-4385-a4fc-c2d8c921021a", "value": "192:Ik7qMz+LUfXm1YFVUsmgUuELIKU9y+dIYF:IkeIaeXmm4kELIKsyQF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543486, "uuid": "ce4ac4ab-edc9-41ef-8eb3-5fcf7ea57218", "value": 10391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543486, "uuid": "43d7b315-601c-4430-aa85-b7ec70c47120", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "155e5e70-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787543487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543487, "uuid": "134e6e1e-e164-49be-bce1-653e1e169c7f", "comment": "Malware payload", "value": "9687d2fcb154a8abfee8180bb3f22471", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543487, "uuid": "37fe0d25-485d-4e94-9c95-fecd838e5a02", "comment": "Malware payload", "value": "98e8621d5c2822da0ccae779f5025f56ea690e955d55ae9af7c8cad9a2658599", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543487, "uuid": "a8d35e34-a704-48a7-af5c-9312d2803b4e", "value": "T14C934B02BB194F43D0971DF01B7F1BF087A5BEA158B5D588751AFE8943B09F2A017E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543487, "uuid": "9e4f0da7-56ef-45c4-af11-1e3b91205e7d", "value": "1536:59kDIPJCZGv+tDM7pYZgmqpoJljzKVqjJdGPbsrOY:59kDIhCk2M7AgRAlygdGorV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543487, "uuid": "a2744ce4-7456-4462-aeac-abc143770487", "value": 96884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543487, "uuid": "0da3c396-4116-441e-b46f-8287156de6f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "259d6633-9778-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543487, "uuid": "291c01f6-12bc-41ff-b4b4-3eb53cf16c92", "comment": "Malware payload (Mirai)", "value": "18315824243862519c139bbcfdd018d5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543487, "uuid": "6669ad3b-345c-43d6-a2b8-cbd3fc7e6ef5", "comment": "Malware payload (Mirai)", "value": "42320cd1431f7301e6b00c0d30a3caa43622b734b7f5c3787222f76ad05b3c84", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543487, "uuid": "cfd831d0-ea0e-465e-b811-503b168df808", "value": "T115833A3279750D2BC4C4A87A62F70725F2F3479A24ECCA1E3D610E8DBF64640265B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543487, "uuid": "d09b4061-e424-4458-9d45-b873f88f65d2", "value": "1536:BUS/TVfxweU6r/TcVd44iBRitEmNWq5MfEQxFttLE:HNvOd08WmNlnEE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543487, "uuid": "9f9a7681-e3fb-46ac-8ad7-135773a502aa", "value": 87532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543487, "uuid": "15cfa8b0-826e-4aac-b9b6-43fc19456a55", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "248f7619-9778-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543487, "uuid": "fe7aeebf-4f8b-4330-99d8-47952181ce29", "comment": "Malware payload (Mirai)", "value": "216523d2c90397ba2a2035a868353457", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543487, "uuid": "433e227b-0ba1-478c-ac83-64193d28a6d2", "comment": "Malware payload (Mirai)", "value": "979ecedbf94eca29beecfedc5fccfd78d7ba469e23ce36e15fafa29e96cfdcc5", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543487, "uuid": "a3a49cbb-f476-46e0-b8cd-9bb547f57554", "value": "T1FB1132CD60695237C1FC9E1035AA8AC8D714939AD0FCC718F8DCBF21D9D694930D6E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543487, "uuid": "ec1bc4d6-72f5-4470-818d-3d266a004be8", "value": "24:OGcGoGmMWGwlGgG5YGoGjYnHGjPNPWGjP0PR1GUlGo1G4G+7G/:Oj3DMWrP4YXn6NW6+R1tlf7LQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543487, "uuid": "96daadf5-38b6-4d1a-87b4-031ea51702f3", "value": 1097, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543487, "uuid": "f2ca054e-dc69-4628-82de-be5a0286b424", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15c2eb6d-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload (Aisuru)", "timestamp": 1787543488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543488, "uuid": "a14fe16c-1c4d-4e65-9833-bbe4522be4da", "comment": "Malware payload (Aisuru)", "value": "ae946a76020ed6d4911a152cd4c76e54", "object_relation": "md5", "Tag": [ { "name": "aisuru", "colour": "#af35c8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543488, "uuid": "7f5500ba-527c-458c-976e-00891ae99324", "comment": "Malware payload (Aisuru)", "value": "7bc264b4a37d6ccac9176959cda22c0ea99a3a962849017e21dc8723a4e64fc9", "object_relation": "sha256", "Tag": [ { "name": "aisuru", "colour": "#af35c8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543488, "uuid": "179e09f6-1d3c-4f14-a8f0-b22c56abcb76", "value": "T1CF830882E747DAF2E80311F592FBDB312A35FE3A0835DC8AD364EDB169126D2550A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543488, "uuid": "69ac52b9-e411-4026-b23a-8522f0018107", "value": "1536:HjY+hjEaGOu2uIVzmafYukUUu/WY53hGw1rq++dP+xogMSYri3ajcGZ16:HjY+hjE6nTVzmafYTZI3hGQW++y0yaHZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543488, "uuid": "4407d9eb-519c-46fb-977c-ae1e6d150925", "value": 87664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543488, "uuid": "19317c84-5da1-4b3a-9129-1991fd70c8d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24900d83-9778-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543488, "uuid": "2be327b7-1234-4c1f-b64c-c7f5f471dbe4", "comment": "Malware payload (Mirai)", "value": "6c6c8148e4ec39084a1e04e49e18bb0e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543488, "uuid": "fd19e9ca-3590-4517-b473-fc5a4b75de6c", "comment": "Malware payload (Mirai)", "value": "4258b8449e1da87af25f94640a86e9c982c00c33cd82e1d806582c49790e7760", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543488, "uuid": "65eca865-cc72-4236-bd69-c9195c8ea557", "value": "T16C835D43730C0A47D5670DB4263B57F183EA6AA121F8F689350E9F4A9671E328197F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543488, "uuid": "4286885c-473f-4ea5-afcb-0eb349b5fdf3", "value": "1536:5LVI2K06TNIYH4m69kHPlWHwxkCervFUqo9c9qdJc/7nrhtGfGPK:5F8qYYDkdDbeX9qdJorMCK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543488, "uuid": "bd900152-c206-4d22-a15d-e5ebbbc75774", "value": 83448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543488, "uuid": "841e2de7-b264-4afd-a31f-48dc6ccf6497", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "165c4937-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543489, "uuid": "8e9fb36b-72cf-40ac-8a8d-58246b62f01c", "comment": "Malware payload (Mirai)", "value": "455839981635aa556393ff142e9bb9fd", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543489, "uuid": "bc16832e-0a6e-40ef-8971-8d34edb869c2", "comment": "Malware payload (Mirai)", "value": "b2070ddbecc03dbb26cdc2a72df88e9fc5f6bb7215ea3e12d0d1035704553bde", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543489, "uuid": "59a5110b-3709-4354-a7ac-f3ac82dd4842", "value": "T15FA328067D42DF03C5E522B6B6AE45CC33126BF8D6EA3142ED267FA1378A4DA0D367", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543489, "uuid": "0fd30ac9-e1c9-42b7-979a-8cb5b27043a5", "value": "3072:HHSHQYiLfHOaoPVqeerm9U0e8HYphosHO7:HHjnuNerf0e84zO7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543489, "uuid": "b7cb6673-6079-4c06-bdbb-ca04b44c8046", "value": 98960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543489, "uuid": "2fcca5e5-0777-457d-a53a-897d1e2a4862", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "165d1a6b-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787543489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543489, "uuid": "dbaa4eae-e07c-4d1e-b589-9800127de259", "comment": "Malware payload", "value": "307ca742ea9c1a4c4fe76e8f987d2e8a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543489, "uuid": "a9e7ddb6-23e1-4c1f-a9f6-b571d683fb84", "comment": "Malware payload", "value": "9bc1d08072255a5ec2db10fc75df1dd9e73097a75cd9150cfe875ebd6712f17c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543489, "uuid": "33dd191e-9b80-44d8-bd87-a238b9b15058", "value": "T13874C537F292E17CD18BB1B43ACA8ED3F560B0F00261645B6299453B3E22EA44F5E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543489, "uuid": "833e1002-0aa8-43ad-a528-acb6237e873b", "value": "6144:b2+pszxplj28ODnXnQvz2ZegCFXlifBr8sZa/T:b2zxn28OzJmXVsZa/T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543489, "uuid": "609bb198-cab2-415b-a554-236a1215f366", "value": 348856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543489, "uuid": "16289c8e-4105-4a40-83ac-901c918f1ff7", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "168f36cd-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787543489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543489, "uuid": "a245481f-0927-475a-91f6-03465d822143", "comment": "Malware payload", "value": "a767269c2c861cdde88fabd544a81cae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543489, "uuid": "1dcf73c6-c245-4993-93f5-50c2b3fa92c0", "comment": "Malware payload", "value": "02a9875408f25e1d05c1e1f9ea422a51b7819cbbcf1addc74f1e9eba111ec8d8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543489, "uuid": "2b0613eb-7eb0-472f-b769-a614d6f8dca4", "value": "T14FE1E8427B41D133F988A2FDA0A5864DF765C6B6B600DB1BF05F54294FCB0B88E60A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543489, "uuid": "bf9542ab-13f3-4fcc-bb05-fc186a73bfd9", "value": "96:YeOVdyKgQura17K0FJSWPmcIzoqiMLYMMHQAapJqYYA3vtFI+qj:7O35VJJ2cIzRMdaDiA3vtFI+m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543489, "uuid": "75121fbd-fe84-42b1-9f9d-7f9de9a6e3cf", "value": 6887, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543489, "uuid": "18768b85-d215-4fdb-9e3f-75ddedd31513", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29b53fca-9778-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543489, "uuid": "52c400ab-8a57-4d1f-adee-284ded88381f", "comment": "Malware payload (Mirai)", "value": "f9ed5a2583115f7af300a2c676f5f407", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543489, "uuid": "23418d06-7825-4852-b019-46175f6c4bc9", "comment": "Malware payload (Mirai)", "value": "0512cc0f9d328662bb5917ccb4bcd7ec1be9c343d621f49873dcef4400f4fd33", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543489, "uuid": "cb984750-1a84-43d0-9126-dbdad1f3fcbb", "value": "T1FAB3F946A9419F12D4D631FAFBAE414933536FB8E3FA7101DD206F6023869DB0EB76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543489, "uuid": "982bc024-0a47-4f9c-8bf0-431fc2bd8868", "value": "3072:g0U1+xqVarix/u7p2va+FbR1TFCV7Pfj0g0wqmFaff:g0UTsrix/SAva+FbR18V7PR0ioff", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543489, "uuid": "39159149-dce0-4b4b-aec9-847a2ec07f85", "value": 110088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543489, "uuid": "46d7edb1-ac24-4a7e-92b6-c6486653ba7f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16eee2d2-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787543490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "1be3dc5f-8b39-4d54-b022-38b580767db8", "comment": "Malware payload", "value": "ca562521cef8572f2550908cb03b5961", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "969b74b2-2010-4f9d-bc0e-b4289ee3aff5", "comment": "Malware payload", "value": "336656fc6a31de7dda597b739354db26beea2315edc0628232d3972a8d65f98e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "a4c0f306-1bdb-4632-94b8-5cba0cf13cf9", "value": "T18CA329737A338E07C0C5B5B241F34625B4E6AA6E18788D4DFEA25EC8EB117D032167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "0d4a553c-7623-49de-8733-96354ba8e61c", "value": "1536:5/zKsafODM7fR4jeaKfgqOeb7NF9MJiGt3o+D6E:naQ+CqaAb7YToe6E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543490, "uuid": "03bc0c73-74ae-4a45-9398-d0255525e525", "value": 105060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "0349e4a3-3c01-461d-a01d-8f7fb833bdd6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16eef057-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787543490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "dafb469d-c84b-454e-a096-0926cc716c5d", "comment": "Malware payload", "value": "13b8702742c88c90cd02f9f3b1969cf3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "ea35086d-815e-4b32-a227-943ee524f4f8", "comment": "Malware payload", "value": "9fdef11e64a74cd402931d7f8834e999825c0e0e91355f0f7b571c9c24588313", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "14a258f4-17b3-46c8-a5cf-d17c8bdfe5f3", "value": "T1A4937C23AB954F86E00776F1A1F19D744F33BC2B48671DFAA526EEE90083AC875423", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "5e8060ca-35ba-4f61-998a-6de1ae7a84b8", "value": "1536:Bjt6Xzi/qqIiCXtMUhTnrvSTGfGCwacbYmlUnqgtsRTX031TY7shEC98:Bjt66DU7hTnr6TGfGRacbJkqgCR+TasC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543490, "uuid": "02bd98a7-0760-46a9-8285-ecb128b5618c", "value": 95844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "21aa97f9-2fb4-43e5-a126-fcc6ca386166", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1702f79b-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "dcdd692e-4815-4443-b0b2-66728291a9c9", "comment": "Malware payload (Mirai)", "value": "e7c350506aa41a9755dfddb9d230206f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "bda55055-cbae-4604-b88d-fa156bfc5dca", "comment": "Malware payload (Mirai)", "value": "fdafaf4366664835f363de8b39cafcaa03ce1136b84c7aba87a9e143478dd7d2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "fb6fb30b-9fc8-47aa-a8ad-ccd6f1f4530e", "value": "T10B930741FA87DAF6C50385F080E7B63F9E31BE1E4431C59ADF98EEA9D923AC125053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "aa8c6493-7623-4b59-a072-c834fbee8fee", "value": "1536:2rniF7anyy1O9cId5slWhiUcOZoRfKkfYkBxylFupNGmtNe:2LiF74yWO9ckZIfKkfYoyepNGa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543490, "uuid": "5ce4a527-01e7-453e-b8c6-bc79c96c3e7e", "value": 91088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "94616418-d2ab-4a96-b490-166594e57c37", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25a4f8c0-9778-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "eafe44a7-5c35-4a1d-8b7a-3cf547ee7766", "comment": "Malware payload (Mirai)", "value": "4b66fd4d0dbaf140c9f1aef62d86c09e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "ee81f979-da22-4d8d-b598-1ce3f6aef045", "comment": "Malware payload (Mirai)", "value": "4a604b39bfe0e8d39f57b35cbe8c208cd70c6d5d8c55381121158932593b7870", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "711248f1-9ed3-4a50-a5b7-227e6d47bdc8", "value": "T1F3B3F706AB600EFBDCAFDD374AE9170635CC651B22B96B363534D928F54B14B0AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "23cea405-544c-4fce-bc21-00e0feb77808", "value": "1536:1AvUsMhoaFoGYzkfNZ/iu3OAQSe2InSOnEncQZPK48OZm/jFKGXeHkV1m:SvibFoGFfPVeNnLEncQ8n5V1m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543490, "uuid": "3758c5be-b03f-4af4-9cce-5415688d6172", "value": 110116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "56e145c6-d023-4989-b5c9-f0d5980f149c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27f4b605-9778-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "2263afd4-ea33-4434-9c8f-abc0a7c04fac", "comment": "Malware payload (Mirai)", "value": "4a3fe90abcf1f61d71648af1cf1440ef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "4830771c-f726-48e2-b301-b988c0771c0b", "comment": "Malware payload (Mirai)", "value": "f0aa4e722f27d724c26411764680da2f6b61c17d6dc726dc0b8a700e9f620dcd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "a5bb01b7-62fc-461b-8db4-2e5b7f6fc3f4", "value": "T13D834B44F383F5F0E94605B0015BF37E9A35AE262024DD6BDBD4FA73AD31A42E15A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "6403dc4d-6e6b-4469-98ae-cccbdc177ba4", "value": "1536:TafHOVPOtn2N5Jiddh3NkAO9Ub310Ix7x/oIu9sDmHsrI:WwOd25ShdV6QutsKk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543490, "uuid": "d071ac45-45bf-4a49-aa5b-55f74b4c8058", "value": 82660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "07d59578-1c65-4b73-93aa-6838a0d23762", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "173fbd51-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787543490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "a69d9c06-4a61-4c7e-a618-3d3fd9081c55", "comment": "Malware payload", "value": "b23961d92dd297696dc0708f9fdbf0cd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "13831507-ecf1-4a24-8f77-efaa12893e35", "comment": "Malware payload", "value": "ac28bfc0d7037af9aed40d633a824f061d23374f86a4e2f422841a7cdc2f2bda", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "db4b7d07-3dc4-43d2-8821-cac11f418c93", "value": "T1B8935B86BD01CF3FF41FAABA449708267535FE6518821B61A273BCE3AD610E22D53F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "a1dd0f0e-8cbb-4df3-a47b-3dd9d2fc6713", "value": "1536:cRVWR11yelssP1zVTrdkMMmmLQzr8631WYUF167aZ:cGaezVtJESrE1maZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543490, "uuid": "c4f40c32-b813-4de8-b36f-16b4f68a391a", "value": 97052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "bf52a9e3-b820-462b-86ed-64871f89e904", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "259c8b39-9778-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "b070fbd3-e0c7-4308-aa1e-91769c0213a1", "comment": "Malware payload (Mirai)", "value": "2aa4eaf6e31177ea27d5f531914ea07d", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "7c80bce1-4604-46ae-9d00-a2028dbb9c8c", "comment": "Malware payload (Mirai)", "value": "543af251df940d4a853172e954152839eee260ec15d5164c88ffed40aa5c2c63", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "5bef32b0-9817-4dfc-ba5f-f6c7321fb828", "value": "T148932996B8824B11C5C512BFFE2E118E3313177CE3DE73129D246F24678A96B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "9cb3a656-88d8-4e9b-abf6-3003ab17f729", "value": "1536:NjknpsG0wT6Fepl3EVcBRvXKPGKYC/1VBa5coanatQRiyOYf55iOR5oot7WxM:NPyTrpqVcBxKPGK31VBa5SOYf5UOR5oX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543490, "uuid": "960213a9-fc54-401c-be96-3513f293c7f0", "value": 91528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "4342972a-8746-4acb-b84c-1a4abc9498e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17401884-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787543490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "8ad6c529-82a9-4b4e-90d1-fef496f9fee6", "comment": "Malware payload", "value": "87b3538ef395d7180dc62e5c8920081f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "cf37c529-4051-47fc-8a22-7d93c1d914ec", "comment": "Malware payload", "value": "b68c2a6af863c98b91e172f21f4593f37d2cf25a39a3e216617e58124f0ada26", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "c0ca2375-209a-4c52-ac23-af1983d757c4", "value": "T192C3E709BFA10FFBE85FDC7301E90B1A258C6D1716B63B767534E858F24A18B0AD39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "02396efa-e83a-46dc-80ab-8d4a64cbbea5", "value": "1536:YaDeho+HPtElSuLBina17EjtVvlb91VPwdQOADL27Jqlk0DrcDHnBGVRIdpCNHGf:nK6E1ud17EDwdQOQ2oeLBGVRIFO090M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543490, "uuid": "f69df904-1399-44dd-909a-9884092ad3c9", "value": 129764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "d358ec73-fcf0-4fb0-99a0-9759d0fc1a6b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "249ae686-9778-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "bcd55246-b7e1-4603-abfe-0b3002950d77", "comment": "Malware payload (Mirai)", "value": "c9b73f03f37dc1f1c94b4608340866ae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "ca670f7a-6376-47b9-9476-ac9695bac0ff", "comment": "Malware payload (Mirai)", "value": "7ac68d8967ad6c5ed092e2d3480187f3c29a36fd65d8b71ba6a5768809824a8b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "6e32b529-589e-422d-9308-02da01fae7c9", "value": "T186B3D95E6E628FBDF768C33447B78E21A39C33C626E1D685D16CD6005E6028E541FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "7e1e612a-23e9-4ef1-8dd4-c8dc37e09fe0", "value": "1536:kCYw1r/F9jP18HosNtlXwbjrNcIqkpnNyD80IXejtFXLRzw:kQ1r/FBP1871wbjOIqkC1IsLRzw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543490, "uuid": "6d6dbdbb-09df-4104-91b9-804043477045", "value": 110116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "34927704-5279-4a1d-9c97-bddd29911cf8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df42bf70-9f6a-11f1-8686-82aee05be84a", "comment": "Malware payload (Aisuru)", "timestamp": 1787543490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "44a53765-0a8f-4322-b737-dbc536df95ba", "comment": "Malware payload (Aisuru)", "value": "f4bb6e7e923f2ff5193147bc0a4a3495", "object_relation": "md5", "Tag": [ { "name": "aisuru", "colour": "#af35c8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "15457e64-9715-4818-83b9-953861edaf66", "comment": "Malware payload (Aisuru)", "value": "118be4b076806c3d426507fa11cc0fffc40c62be51343aef8e82cc04d91330b6", "object_relation": "sha256", "Tag": [ { "name": "aisuru", "colour": "#af35c8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "09abcb67-e8c9-4670-8836-fd1d335be0bf", "value": "T1FC85AF0BBBA179A9C416C531DBEF83652333F07126222D3F268876703D9BDE46E167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "8a3869f6-3dff-4653-a35b-f6bbdf00060d", "value": "24576:6uD54NgXqHDH+VXdcPTbhufVozOYnTgoQXSM81FNg:DD54NgXqHKVX28fu5HQQ1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543490, "uuid": "c722b622-47a3-41fb-a661-10eb7f591f1c", "value": 1822880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "6de0f963-29bc-4183-bc8e-983c2334b535", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2488a124-9778-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "32b98a20-5635-45c1-bdc4-1cb83cb324a5", "comment": "Malware payload (Mirai)", "value": "679d60d8055316b7d52d67343305a632", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "f7038ed3-2609-43df-8729-3505cce50eb6", "comment": "Malware payload (Mirai)", "value": "f49d4278471bf51500ebcf425c6289769377dc061d87bd62903fd4ff8030926d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "e26dc9fe-0162-4991-966c-c69b6953a03e", "value": "T19C735B03B5C190FCC589C178176EB23AD973747E0239B2AA63D0FB277E89E215E1E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "77ef05e4-3c3a-4aa5-962f-348b5504cb37", "value": "1536:hVWVomSMzMFZqu9bgwZYKXUSOsREkrVbb00+6RgB1k12B3+bRQjyd3Gck39:uVjJzMSIRZzXcsREGbb00+31k12B3SQn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543490, "uuid": "7bbcc9ea-799a-4a65-a72a-9bc3e973e9c9", "value": 76496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "17651a1d-3b62-4460-80fe-547a4228a0f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "176085ef-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "480dbc78-60bf-45a0-a494-c8d09d6f4550", "comment": "Malware payload (Mirai)", "value": "797125981c82b7a0a3333651cd742c7a", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "13de38ef-3816-43dc-a060-be268c01e9db", "comment": "Malware payload (Mirai)", "value": "60b59195ee6260aca64bf6f704d52b064cfff2533692eb70f006c564a8dddfb9", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "6ea6c7d4-3bbc-4321-b61e-54e1f0df56bb", "value": "T1E1A31A067D42DF03C5E522B6BAAE45CC33126BF8D6EA3142ED266FE137864DA0D367", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "d5dd5be6-2d91-4774-80e9-f04b35099785", "value": "1536:pETde7An5IjskVFXfXENMd9k8KQBPHDpwhncksDGpm1Wm2JdRezfLX7:yx1IjNnXfXSIk8KQlHDp2ckstYJufX7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543490, "uuid": "2815f092-c7d9-4141-acc4-e8aacfd88f69", "value": 98960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "2383c71a-6d5c-4c22-bf1f-3af23c10e289", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1774a3ce-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "f9235206-0d55-41db-b260-153a32cdb808", "comment": "Malware payload (Mirai)", "value": "2bdd89c6489756ee6e10ecb34501bbe6", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "d8f0f2db-1459-4d24-b538-e432665444b2", "comment": "Malware payload (Mirai)", "value": "84ea062cf0ebbd2474f50dc74d36c6805814f6a0486bcdfa0c40273e01f749e8", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "7e94c7de-d50e-439b-aabb-91126976dbc1", "value": "T197B33C46BD91CA02C1D225B6FAAE54CD33136FF8D7ED3115DC206FA067874DB0A7A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "00b71b85-6150-47b6-980f-08a0107458ba", "value": "3072:jA5jkcg3gnMQ91Q0/OB1wVXGwGd+Ln0z+APX47H:jUtOB1oGwGd+La+AQ7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543490, "uuid": "2af93909-f8eb-47a1-b214-35df38ad665b", "value": 108040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543490, "uuid": "b8217a2c-0c87-4fca-8935-2076a8e36d0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17edf47b-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787543491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543491, "uuid": "0814a90a-141c-46c2-bd37-0b673e4f61ff", "comment": "Malware payload", "value": "5ff37f08fe5537b9eb8591c142717325", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543491, "uuid": "bf847889-7c77-4c4e-b148-6b2238d0123e", "comment": "Malware payload", "value": "c9601c7bcd2aea68da00416346828a1012ef3acf1331bbce9ea885944c19a431", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543491, "uuid": "97c8c07a-719a-4dc8-9bff-e260283c37ac", "value": "T148B264E0F88B8930258A812D3FD68401AB07536B09121C14FA5EFB797B7D778737D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543491, "uuid": "947cc4a9-a75e-4c2d-8e4c-26d4ef37010d", "value": "192:os5mbDZtnC7o4OKSQbDZtnC7o4OKSibDZtnC7o4OKSNbDZtnC7o4OKSbVDUWWWWy:osQCPCjCsCvgCJl0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543491, "uuid": "2a9b3b0b-faa6-424b-b49a-853fb115fba4", "value": 24794, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543491, "uuid": "2fd136b5-b158-4ed4-b59f-7e37f0f5bd58", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "192435a9-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787543493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543493, "uuid": "f629ad9e-b9a8-4e54-bee4-eca27253e689", "comment": "Malware payload", "value": "18d4be72c7ab95bcdcdd63dc19447032", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543493, "uuid": "00b58ec0-72d1-4c33-890f-1d22c47a6d6d", "comment": "Malware payload", "value": "fc6db036cf7de32720f0ad3daf2d42534cc687f34d3b098a37be5a4a90b5ff11", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543493, "uuid": "a2b18b71-1da6-4833-bb39-00a4c68a4b53", "value": "T162E58C53BCA509AAC09A933189664292BB31FC490F3223D73F50B7782F76BD45E7A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543493, "uuid": "7b7beeac-7c74-4641-a35c-27da213c7c49", "value": "49152:5t0FiS79JkviYhMc8nH7oreTzzoBZ/7tO6hoOl8L6sk4DZxN:5GfkKAGErl5FoOquInN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543493, "uuid": "20991e17-41f1-4121-9ba0-29121db55182", "value": 3253338, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543493, "uuid": "13f93ec2-33ce-439e-8f81-5d242f02d8c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a6217e0-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543495, "uuid": "4dd8433c-3c92-4c56-98c0-ee68d97bbf11", "comment": "Malware payload (Mirai)", "value": "23c86005938a365aa13f47c757508f83", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543495, "uuid": "509ea4b3-b536-4cb4-8e90-70c166d43765", "comment": "Malware payload (Mirai)", "value": "30d0f4479b7223afa3e6679b6261e68685f25ef5127e00f596b946fc9518bc78", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543495, "uuid": "ec97de79-2325-4e2b-b4da-7fea318a4cf2", "value": "T1B8C32B46BD81DF02C1D625B6FA9E548D33136FF8D3FA3015CC216FA0678698B0E7A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543495, "uuid": "ac042094-866a-4407-8b1a-7f5e5f585e9b", "value": "3072:LDpGyGD7lHLbdRkRc2h8kRRUoooLMIi/1CtPyL0YDIL6a9/:Lc8Rclk7UoooLHitYPyL0Y8L6K/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543495, "uuid": "d346c716-a38b-4eab-a51e-c944a1483e43", "value": 121456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543495, "uuid": "45f7df0f-7af2-4a83-ab11-917969fe5c30", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a9e87bf-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787543496, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543496, "uuid": "e34425bc-ab8c-458f-9518-f0c6adc93673", "comment": "Malware payload", "value": "187cc8132bf32386f1b52df97475165e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543496, "uuid": "6615d1bf-f218-403f-bb5b-ac2476b9dcbb", "comment": "Malware payload", "value": "1643dacd9feaedc58f3cc581e4d22577dfe25c09b10282936186ccf0f2e61118", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543496, "uuid": "cc56b19e-1c00-488c-b399-73566bf7a5c3", "value": "T168868D03B255DAFAD05B60300D8FC6972369F8717F28321732867B2D1FB66614FA97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543496, "uuid": "ff1ea1dd-03ff-49d0-93e7-c59b88b6a43d", "value": "98304:+4DLt8vtXjcTfORdMQAD3dLXY02IakqjNrqzh2DIzv3ZXpvQGm7oNRRQLplv51dX:+0LBqPplv5L0AtB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543496, "uuid": "8ffc029a-b9ba-4843-8ee3-735ea682ba0e", "value": 8020928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543496, "uuid": "c1216c74-8aec-4820-911a-b1ef6fa92696", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1c62145-9507-11f1-b064-82aee05be84a", "comment": "Malware payload", "timestamp": 1787543496, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543496, "uuid": "d6b0c857-7298-44d8-8774-fc2e0a4084b7", "comment": "Malware payload", "value": "2ed6e3fc1ad03dfe9b4ee8cd0e0286eb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543496, "uuid": "68913016-8e92-49f3-aac9-e3b8660101b2", "comment": "Malware payload", "value": "c77e845feedc323ea12c20ae1859ec06e5959b37d06225bf878f2d7f0e82e66e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543496, "uuid": "f7b355b2-ca02-4e0f-859d-475b236f07a6", "value": "T16F9633A3510619B59483F944E3287CC187A5381B8BE9B8328F4BCAE64DB59F3D7C67", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543496, "uuid": "fa40e059-0549-4e56-ae27-fa4ae465faf2", "value": "196608:V7RMKKwkni/LzitFnQHklcWgtbuoInjakCNZBY031idBQ8NX/4Q:V7RYwAnpc0o8WkCNZBY031idB5QQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543496, "uuid": "787d29d3-3b5c-403f-93d4-069270f9c021", "value": 8790076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543496, "uuid": "f9d66ab4-9975-4b27-a49d-5ababb4e79d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ac99dd7-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543496, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543496, "uuid": "f9245f65-9ed9-4451-8e35-f6f7d9170022", "comment": "Malware payload (Mirai)", "value": "0b8dea53f9800d90a6554ec430734920", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543496, "uuid": "dedcb8a7-e5b6-45b7-9521-dc08f4e05c61", "comment": "Malware payload (Mirai)", "value": "613ec570594be2691ce18fe8aa51aa4716584c0e586ec97dd790c4b9757b5a83", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543496, "uuid": "a6b47580-ad95-4e7e-8a36-af08c3d38490", "value": "T197E66C16FA6250AECAB9C87082AA5537A730B409435179AB6FC49F702F51FD04F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543496, "uuid": "ceca8ab0-2b2b-4033-bb5f-6dba6d2a34f0", "value": "196608:U09lFnclNKZYkwz3yVagbMt3uHJsFvCPwPDO:U09lWNMNwz+asMt3uHJsFvCPwPD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543496, "uuid": "543a8194-b245-4b50-ace9-6da99c75c037", "value": 14357504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543496, "uuid": "fabc1d2c-8456-40a4-b5f2-3d75c438b995", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2899af9a-9778-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543496, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543496, "uuid": "df36b75b-55ea-4116-8776-33448b4d786f", "comment": "Malware payload (Mirai)", "value": "60673886f744f83d3c7f77b6adc121c5", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543496, "uuid": "7a79e967-ddc0-4104-bf35-af8cf13f9645", "comment": "Malware payload (Mirai)", "value": "548c8cb9348494a5d07f978a7e37ecbe3976f657866a7467006ae0bfa99ec420", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543496, "uuid": "1915c76f-9f2f-4f37-8b66-9e66fd869438", "value": "T11C732991B9829613C5D0127BFF6E428D772A13ACE3EE72039E256F20378785B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543496, "uuid": "5da15bd8-4690-4f1e-a515-25b28752f4b2", "value": "1536:NYgwmaGQNN55GvWzqIQWyyooVSbmASAQ8dMdwxSFFeDK:agwQXWzqSoo0bmAxs3p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543496, "uuid": "da31795d-0daa-4b95-96d9-ae661bafdfbb", "value": 80228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543496, "uuid": "87b5f75b-c57e-4942-a9c4-bc147eea59db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1aed1707-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543496, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543496, "uuid": "8f4e77be-a650-4629-bace-4bc54e3d5518", "comment": "Malware payload (Mirai)", "value": "531c0deac93b2aec0fd7212181281b0e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543496, "uuid": "74d8a241-124e-4011-9597-0f95b6c1d334", "comment": "Malware payload (Mirai)", "value": "95871105a8ca339c39ede4b2da1e2d30989b5a91395b808ba81f3cf9f7ed0b14", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543496, "uuid": "2e6e38c2-5f12-4124-8e2a-e047e97a4ea0", "value": "T190C3A50F7E218F6DF35982714BF74E3496893B962AE18546E27CE9101F602CE641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543496, "uuid": "81886a85-217c-4d14-b97f-6d47f0f1e898", "value": "3072:FsTHFbgNnCJecNO7kbPE69LxdtD2AheZCWDI:Fo3tDVd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543496, "uuid": "e61d805e-f941-48c9-b5c0-bc870b31c699", "value": 129588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543496, "uuid": "2891efeb-25e3-4366-8016-fcf54b059e2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d53f039-9778-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787543509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543509, "uuid": "eacd579a-8581-4ad0-a2d7-fbb4a1ae51bd", "comment": "Malware payload (Mirai)", "value": "b3c1644367f6acd8443a96c08dc9defa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543509, "uuid": "aa73a128-c4bd-4bbb-9257-92e461536524", "comment": "Malware payload (Mirai)", "value": "5db0ed2a28e28d60c056ea6bc7410d6d4d013847994096629b7bc0257f46ea0a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543509, "uuid": "e9ecb622-c2a4-4a6c-b9ac-8a76b16e2569", "value": "T12C634AC4EA83D8F1FD6706B51137E77B4772F43A002ACA4BDB64A932BC66901D6172", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543509, "uuid": "2ab9e515-fd88-4c63-b0e8-1544488e3c20", "value": "1536:tpMHBUndfPoX7h9scHlKl2V52i3pn+CZjYyR4G6CAiLyX:tpISdfPotZHlfD2i3x+CZcE42c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543509, "uuid": "4d07d543-bceb-46ca-83ea-f8e6cab4f97f", "value": 70836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543509, "uuid": "918f9210-2262-4967-ad49-ac50522dc1fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa5575b-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787543531, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543531, "uuid": "c2efe8b3-2011-4a20-874e-db88f5dca48d", "comment": "Malware payload", "value": "473dfcdf125e204de774a4665e4885c1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543531, "uuid": "7340fd7f-ce75-42ab-a9c5-e10b109b1d43", "comment": "Malware payload", "value": "cb77f388148e15614f19630eb371ca524d2deba95d6c3b4df10925cccf224740", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543531, "uuid": "e242f554-05d5-4f42-83ec-f0e1880233bf", "value": "T185B186234829AC721157CAA4B146762DC0EA8277F342C65A72FD815C9FD3DC285E37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543531, "uuid": "8106376f-76d5-425f-9eb3-d66a79987a6b", "value": "96:MJlH7n472wO36VvLb9NE0kNUmgHwrSUx9PGsq/GNt7sG6Exml51pOT1pV8Q3O3NZ:MvH7n472wa6VvLb79GUm3H9PSGNt7sd1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543531, "uuid": "05c5f67b-772a-4bac-97c9-780f3940d4ad", "value": 5413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543531, "uuid": "6f0ad77f-4891-4e81-8aae-2fe1d0f7e8c5", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "769b46d4-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787543650, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543650, "uuid": "c960add5-3566-4573-a6c7-537639bcb94c", "comment": "Malware payload", "value": "b615a3b9e32c357a043fdada5ec40c30", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543650, "uuid": "d6622d03-bd24-4d93-a416-c849ec07b2db", "comment": "Malware payload", "value": "4e63e6478e1880a5fb66dbfa094b5cfa2548351dcef1e0779a85bb8b68757b59", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543650, "uuid": "a0c6be5a-d631-4089-975a-80e39a5bdb17", "value": "T1B963F97378C6142A311F028F6107732CB5BA99D6DA01D9F1F6F661285BB4FA136F32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543650, "uuid": "7df57470-4bb6-4366-b81b-cc463c738da6", "value": "768:uNZdypGVU1pupU0nMF/FbD3tKAD27p+EeLSJb9ee7xdqadPWuo0sCy:uFyp4UKMpxD3tKAD2VDeLSJbndqadPW/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787543650, "uuid": "9b27733f-b2c1-466d-83f3-5dd92d7dfa0a", "value": 70350, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543650, "uuid": "f27ca019-29c9-4760-b08a-d63a344b8d28", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16aad771-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1787544403, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787544403, "uuid": "78d1e3f6-3d3e-4ea2-b349-5aed1f171803", "comment": "Malware payload", "value": "e739dc29e48462e4bee88c21474e51a7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787544403, "uuid": "4381f009-8f4a-4241-ae9c-5cb503079f15", "comment": "Malware payload", "value": "56ed019e39933567056a99aa4822422af73d09886158c6aca16082388494d2f9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787544403, "uuid": "e0102922-c7c9-4b1a-a2dc-5e20eebe3087", "value": "D9F2024633943B73E16255F4E3BDAFCA601E7D64DFEE202BA4413A2270B311D688D81A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787544403, "uuid": "1d6d6373-e5dc-4575-9953-4873c01b90e4", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8g:yYI0ARqw1qAEW67UIWi7M8g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787544403, "uuid": "db7a8d12-2dfd-4dad-92d4-4ee8b40619e3", "value": 34752, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1787552779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787552779, "uuid": "dbe1b0ec-c9ce-455e-b7d2-5fd55da14ae3", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787552779, "uuid": "56f1c450-33f9-4d03-9b1d-b9009312418c", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787552779, "uuid": "5f1f46bb-169f-42ae-a95b-f06c6b84ee6c", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787552779, "uuid": "df15d6cb-87b0-4cd6-bdba-73e192c4e9f0", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787552779, "uuid": "2db20c0f-698a-4447-a1e4-9b3c18483075", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9923ad4b-9f8f-11f1-8686-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1787557452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787557452, "uuid": "ac7d0d1e-8bf0-495b-be03-4da46a707415", "comment": "Malware payload (CoinMiner)", "value": "d5adbf5818d010611ad223ae7d81c601", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787557452, "uuid": "91abf20a-551f-41c2-89bc-e88eb9903536", "comment": "Malware payload (CoinMiner)", "value": "17e7f0170795c2e704077570333a1f0985b190c016d372d6b70a41e170302cdb", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787557452, "uuid": "1a119a6e-b04b-4030-b29c-62076f113531", "value": "T142C6F14369DB0DE9CED667B861C35335A778FD358A291F3BAB08C23169532C4AD1EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787557452, "uuid": "e5d42868-2b53-4072-ac02-24edd9886879", "value": "cec03733c7e1568efc5cd48fedf8e8ac", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787557452, "uuid": "90fe131d-0222-46b3-8628-7dba786fe16e", "value": "196608:NkAFUzeSCKDin2Ex3dW5ltDOvV4x6xwhG/WvbWzw8BAxMaXZLqJ:5IDo/45ltD7x6OhYMbp8BASaJLqJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787557452, "uuid": "73eefae7-4df2-4251-a54d-cce581aab3c7", "value": 12123690, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787557452, "uuid": "5af8cbd8-bf89-49f8-99fe-3f748168d952", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4b1b2ca-9f8f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787557471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787557471, "uuid": "acbc23f5-8429-4755-b725-530fedc734c7", "comment": "Malware payload", "value": "06778ae7869a9f30e9a4bc5422f2b1c4", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787557471, "uuid": "52a695c0-3fe2-4890-841b-ee357a578cf0", "comment": "Malware payload", "value": "91281253b6a9438fa4530af812a393cc730a88caf02cf174774e1f82d5d810fc", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787557471, "uuid": "8b67f11f-56ab-448d-9bb3-314b2e10b065", "value": "T197D733EE993121EED4DB9B3686F0813DD6B7764543E3C923826C0A577D832F0363A6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787557471, "uuid": "f160f65f-e009-4eae-bd0f-21aa589edccc", "value": "8f27129f70815ed9882a468f0cdfef13", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787557471, "uuid": "8b42cadc-4ceb-43a0-a857-b59a1830b254", "value": "1572864:dC3hrRcIABqVI6QOhBQ/6mnfizwISS3x7:YrOIAEVImQiqfi3x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787557471, "uuid": "9829ee7c-9878-4f22-8e66-830b020c339c", "value": 59624084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787557471, "uuid": "d8d84323-130c-4529-a5fb-dee40ef2fc52", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f826b438-9f8f-11f1-8686-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1787557611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787557611, "uuid": "603d0fc3-b462-4c04-85d1-01cde558c9e4", "comment": "Malware payload (CoinMiner)", "value": "baacdc3583ecaa4e7c614b8aa8acb274", "object_relation": "md5", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787557611, "uuid": "3d783afc-3a85-4c66-95b2-5bef22b9be0f", "comment": "Malware payload (CoinMiner)", "value": "8049f126065d8f2c0235e0946389d6b0bc88bcd968f17e2d05bc4dd41e566a3c", "object_relation": "sha256", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787557611, "uuid": "34e7d67d-9010-418f-a187-2b3be5a7156e", "value": "T109363398AC82D474E02BC3B8419638BEB27EBBE14912BC1776E41D184E1FF50597FB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787557611, "uuid": "f25761c9-73d3-4a47-9c97-90411abd271e", "value": "949ec789a5933fb6051c9013a550fb57", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787557611, "uuid": "2f818f40-188a-4fd1-b431-827a149cf1a0", "value": "98304:vOWBcekZcdLkg1o6ZkBqo1b6v8aMSj4gZCn1pxE/Yz8X+aSB3/X1u:vzOTg1o6ZWVWYUFcn178gmiB9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787557611, "uuid": "aa645bd0-168d-49ad-8fd9-818e8c20524e", "value": 5298688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787557611, "uuid": "58332e01-f017-40e0-9f81-324465db1c6c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11ec5d94-9f90-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787557655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787557655, "uuid": "cb853468-9c93-467e-ac6f-212d760de061", "comment": "Malware payload", "value": "06c32b427b048441358504522d64cbc7", "object_relation": "md5", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787557655, "uuid": "c779266c-6bd1-49c3-a6c8-db804309f8f8", "comment": "Malware payload", "value": "a9b140ffc2de43182aa2dc35cf325eebdf5f0571a72a58ec85635ae10c266a6e", "object_relation": "sha256", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787557655, "uuid": "f05b4cef-2564-43bd-8fee-d5ca067f279f", "value": "T141D523A6A9B66934D837C3728FC3D57EB06C7B468A624D97F6CC2A004D03A546D3B3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787557655, "uuid": "4b5cc6e3-00ce-4a9f-ad61-76cecf66d249", "value": "58f4b17816a07f7a36dd14e504d515e6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787557655, "uuid": "859bf285-aafe-4958-9d32-12c8fd12cad9", "value": "49152:GxCsQd75HFFFwtti7zoc3cc55PePaB+iuCr+MSyoPKccvZmU0fUg7VwN:zdZzFw8zr3e1iuCtL4CTC7Vw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787557655, "uuid": "5e89e494-1a23-4477-b869-47687cf28d2c", "value": 2943488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787557655, "uuid": "0cbbb498-6180-4c76-9c3c-c15bf6a090de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8549e8e3-9f91-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787558278, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787558278, "uuid": "f3f95ba4-0dde-4f79-81e1-f47c6aae0af2", "comment": "Malware payload", "value": "ae076c6634df852d2c89cced592d61ad", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787558278, "uuid": "4cb4fee7-7ce6-49eb-9ef3-5cb7f46e13b4", "comment": "Malware payload", "value": "fc22af53a2e03e49f34f1712d9e6183e59f0dab4b75aef113a56987ad2bfe94d", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787558278, "uuid": "eb1caf2e-136a-4c76-9721-74ef77b687b1", "value": "T157734B1B9A7E107B2697E4D07BD8679B31D2301FF365AC193EFC91604F1AC7D8988A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787558278, "uuid": "8c11ec11-4649-4596-83be-b957bad9c8fd", "value": "1536:F213x2KXdbHyYoF1a3pVWgjPzhIMPwuheaN:q3x2A9ydza3hjGMPwge0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787558278, "uuid": "be9e232b-4745-4855-878d-f035264f8399", "value": 79602, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787558278, "uuid": "b3a0b36d-82dc-43e6-b788-db070723e699", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3140f567-9af8-11ef-afe5-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1787558678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787558678, "uuid": "3b0e32d2-2727-418a-9e2a-16db11acd852", "comment": "Malware payload (Formbook)", "value": "b7759166a0f1807b202b45f510c2172e", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "gootkit", "colour": "#020754", "exportable": true, "hide_tag": false }, { "name": "GootLoader", "colour": "#2b08dd", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "KongTuke", "colour": "#A5AEAB", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "SmartApeSG", "colour": "#959527", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787558678, "uuid": "ca6829ac-d107-49d1-a76b-befab224f624", "comment": "Malware payload (Formbook)", "value": "825eb1a627f34c3d1fad85cb5904b5ac0fded65f677c5a85fa992e42c450fd99", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "FakeCaptcha", "colour": "#d08580", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "gootkit", "colour": "#020754", "exportable": true, "hide_tag": false }, { "name": "GootLoader", "colour": "#2b08dd", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "KongTuke", "colour": "#A5AEAB", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "SmartApeSG", "colour": "#959527", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787558678, "uuid": "c32cdcf7-d3b1-4dce-b034-6f48fd10aaad", "value": "T1C632C41E9268386F11EB5195F777B3EC503A4878C060028DB07F5929A257A93EA235", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787558678, "uuid": "4ef2b27f-e2ba-493d-9dac-9d5937e39ff6", "value": "192:OO0vOM7R1YehNAKU3IEjHmaq44BG0wK5FhYg/4fT0Cmlz+S+CVy+g/S:OV6KU3IEq44BG0wK5FhYg/Q0Cmlz7+C7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787558678, "uuid": "c792a2d1-37a7-4783-a45e-a80c0ec3ff1c", "value": 11694, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787558678, "uuid": "8f953c83-96db-4278-9019-112fd182a03e", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7b85a68-9f92-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787558818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787558818, "uuid": "b7f32c26-3b22-428b-bd56-a772a4d1fd62", "comment": "Malware payload (Mirai)", "value": "3da98e5fb66e9d1a0b2c01449889db29", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787558818, "uuid": "147f5b03-1dae-425d-acc2-c5f26389077c", "comment": "Malware payload (Mirai)", "value": "7c82112529268649005f48216dc9f194ab3429329ee509d283a30e5576b9714c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787558818, "uuid": "68f7e0e0-2a5f-43c0-95ca-6207f53c6b80", "value": "T1B9A35B227D791E3BC4D4687B62F30721F2F2479A25BCC51E3D610E8EAF246503617A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787558818, "uuid": "4a2bf81f-c410-4b57-b758-09bcba13cca0", "value": "1536:sXKlesSnFAnv81pLuhBez5zm3vErDlIybp7ijcAcGtlyQNWq5HtgmAl7tsKm9:PoXLSeFAkt7WXjTNlNu09", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787558818, "uuid": "8065e663-9aad-45c8-9768-77a37bcc7997", "value": 105100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787558818, "uuid": "5ed82399-ac1b-4a15-b63a-34e1e67208a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1787558827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787558827, "uuid": "2a3391f0-08dd-4ac3-8262-3b17b1c87afe", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787558827, "uuid": "e406de97-8281-4ff2-840f-f58618ff0c1a", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787558827, "uuid": "40e71586-70ab-4519-85e5-645f6756595d", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787558827, "uuid": "d4514fe4-9396-4593-b74b-02299aedde22", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787558827, "uuid": "b7c1e60b-6f48-41a1-aa9a-9f9939d3cc73", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b2db18a-9f93-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787559066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787559066, "uuid": "41913a3b-ee06-4275-8587-65ff2da76aaa", "comment": "Malware payload", "value": "63e2647e0eabed0406986aebadf4045e", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787559066, "uuid": "9598e1eb-9d34-4505-b8b2-295eeecf3c11", "comment": "Malware payload", "value": "6c5b313d8ea0d048adb0d0587b98b14ce83642030c6249200eabcd044af3e721", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559066, "uuid": "0dfa4a43-5962-4eca-ac5e-9bb2fab30142", "value": "T1F304F1E3338046F76DB584AB7B3A58DD507EBF5003A010F1EA5B6893D4A8762C2B53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559066, "uuid": "1a402c3e-f0f3-4c2f-902e-48d7f0556575", "value": "3072:+4LDyDJKZ3siouZFDrrpmHsCo8Nf+Gggz9LwAIC/j6btH9:ce/1mV3C3j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787559066, "uuid": "5654bb61-c548-436f-8b58-c329fa904d00", "value": 177402, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559066, "uuid": "c16ae063-7ba4-401b-822a-71cffbfa9d7a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbc57871-9f93-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787559282, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787559282, "uuid": "25677ed5-f511-49fd-b6dc-e75769025a2a", "comment": "Malware payload", "value": "63d78360a1a291052b6a566458b3725a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787559282, "uuid": "74a4b531-9220-4f21-aaa5-e12fe54ba735", "comment": "Malware payload", "value": "c83877dcab2cef77e5e9d312c4e189ef88e62a16dd6e9c47bf6ea89390902b56", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559282, "uuid": "25ca15a7-bd49-4367-bfcf-8d85419e8e2f", "value": "T1506633F36AB87293121E6BA81693BF7745883F889F12D8F09DC4831D19F54CBA45B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559282, "uuid": "170d9247-eb6d-400b-a1ba-9f9563d7caf4", "value": "196608:YR9cmad+0AxaiBV7EaysHFyreJ1SpFTycYFKr/sB:D43750Rphyzm4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787559282, "uuid": "22df6cd3-f030-4a96-b743-5ec1b0229ff4", "value": 6929828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559282, "uuid": "2de401f6-491f-41cd-b869-a46f57d8abb5", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6287351-9f93-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787559299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787559299, "uuid": "4ea23ab6-644f-4017-a648-49ab844f2bc9", "comment": "Malware payload (Mirai)", "value": "adf293722f09cb05774f0abd9941b55e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787559299, "uuid": "43216d68-81e0-457b-b24b-35ef1f4a8fe5", "comment": "Malware payload (Mirai)", "value": "e935435d050857463d493b12575e58c21313d71ca5a7d9946d944bac517f9369", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559299, "uuid": "bba1f305-57a8-4497-9dd5-a9d14fb5103e", "value": "T1A7A32A92BD825623CAD022BBFB6E418D372653A8E2EF72179D215F2137C681B0D776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559299, "uuid": "dc648856-51b6-4190-8678-69031d86bffc", "value": "1536:XpevElm3et4qGrO3csmjFCYn330qGgFXFXIkAvKybQytGBH4RJjUAnUZfdCnJx:Xp8zeKjFCYn330qFFLUlbQyIAUef", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787559299, "uuid": "ff0595e2-8a28-4ab9-aa0d-74fdd5423ec5", "value": 99732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559299, "uuid": "2deea867-2b26-4ae5-9919-66d589f0587d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66b02c27-9f94-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787559515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787559515, "uuid": "05a07193-ce47-483b-8053-215193a5effd", "comment": "Malware payload (Mirai)", "value": "64554ad62025301c46cbcef677c81509", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787559515, "uuid": "9a0a638c-9d69-46f1-98d1-9ac23d9011a7", "comment": "Malware payload (Mirai)", "value": "0dd39fd5a0b389fc05abe442df584bf14a80bc6c52d8e27312c4237f120fd4f6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559515, "uuid": "89ee367e-1367-40b3-a76d-0660ac72187f", "value": "T140C3B61E6E21CFBDF768873547B78A21A39C33C622E1C645E16CD6015E6038E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559515, "uuid": "bc760b50-20ec-4f00-acfa-6780aa688248", "value": "1536:xOhpcrKVYB/bCceyHZTheY+QY+N6frP0zmTQBT/i0sXemPvPjvC1E0:G2WVG/Wcffp+46frOmTQQtJvwE0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787559515, "uuid": "2cd7b012-33a4-43d7-97c5-58adaa25785d", "value": 127576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559515, "uuid": "85c7d85a-8993-48ef-9f0b-dcf9ca5623ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b4b85b2-9f95-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787559898, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787559898, "uuid": "430efab9-573a-4980-b873-09450b3b5000", "comment": "Malware payload", "value": "4df1513dded0417468c84e1f4d6a6402", "object_relation": "md5", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787559898, "uuid": "313d9a14-381d-466d-995a-88d7090cdda0", "comment": "Malware payload", "value": "7081e94df4e91442a98ac0f4c87add258c2d2547dad55e609a600f90f7fe6298", "object_relation": "sha256", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559898, "uuid": "4366ab79-8c81-4428-90f4-d6160eaf0f90", "value": "T18CD52389FD8169B4E836C7774693A0BEB12D37859A704CDF33C96B112D12A286C773", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559898, "uuid": "f9d50a84-4033-4ac6-9399-db7747246a01", "value": "5a2ed47d8c6c6433dbc831d38c92042b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559898, "uuid": "2cba20a2-9f52-47da-9d56-ead928b41d62", "value": "49152:+leqJZNOa77mBgklsGxsOGynBp5y6e6JYJVzG7P3sCtUY6nhkH5lKvgJjVAFJ8:+lemZcY7mzlsGxgyvI6YJVqHM45gvgJi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787559898, "uuid": "c95f0fae-067d-497a-b486-f41a36054888", "value": 2995712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559898, "uuid": "001976ee-d311-4417-ad9d-fdf3afe548a4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70e3a882-9f95-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787559961, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787559961, "uuid": "80ad5504-fc56-4aa1-97e1-0e3cdadfc810", "comment": "Malware payload", "value": "59a7eb770abb067ea342b661d5309767", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787559961, "uuid": "d773fe51-a8c4-4ae9-b771-8da569378fd8", "comment": "Malware payload", "value": "d2b616549ee6a5c9564e42e6204f75b3469ee4ac9fe2423f70fd6188b60033d9", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559961, "uuid": "1e739c74-9277-417e-8972-945ca0e3cd46", "value": "T18C3119BB406B089F6D4162A8291FE60610C54B6B45E7CF1711C5222EA3A032AD8E32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559961, "uuid": "ca246454-fc0a-4eb6-90bb-788770c29c0e", "value": "24:hq2m22+FJxt74sC1vuAkXOCPKv1tu3lxboe2rm4YT9GNkVqcjsgYdAKlqtzqt7:AGJxascvuzeCK1tu1xbxTSbcLft+t7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787559961, "uuid": "2f641290-8c8d-49fe-804f-ac29e7424d61", "value": 1483, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787559961, "uuid": "7fd0c3b5-13f3-4bff-9ef5-8b9c1ffc3b9a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7224012-9f95-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787560187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787560187, "uuid": "e55bdeb1-b5b1-4bbe-ae6a-5b55be81d468", "comment": "Malware payload", "value": "3741579bbc3272bffc2e00e493695e4c", "object_relation": "md5", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787560187, "uuid": "670b34f4-1660-42eb-822f-5fe30f6edcba", "comment": "Malware payload", "value": "b4ce5927fe12c1e2a017715f227e58c76258e0d459f22569bf2160fc953e221f", "object_relation": "sha256", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560187, "uuid": "0c526a89-fe97-4f3b-97ca-5b1ad9490f36", "value": "T1B9D52298B9BA2A74C437C7B28F53E47EB15C778586A09E5BB3CC28119D436986C373", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560187, "uuid": "c1a03eed-8d73-4c80-bb0c-e45b6a5497cd", "value": "fe230628262faec735b6f015758b7519", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560187, "uuid": "ddeff387-fc94-42de-a1a9-d1fc4fd971ee", "value": "49152:hqfJUFw/Y9kdofIqk4Z7drXN9n5Zg4NJLrKSCZI3rqxntAbnmR62k6uHkxNEfNYZ:hOU6/S7dJ95ZDJLn7MntAbnmR7gk/Efg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787560187, "uuid": "4675e0d0-b9d5-460b-846b-a072f0e75e59", "value": 2917888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560187, "uuid": "3e3bab11-41ea-44b3-985a-0c5703cca5e7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb63aa59-9f95-11f1-8686-82aee05be84a", "comment": "Malware payload (RemusStealer)", "timestamp": 1787560194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787560194, "uuid": "c705f6b0-9f95-4cce-9d57-0da83d0776c7", "comment": "Malware payload (RemusStealer)", "value": "f1c8fcd0a068217c9d35ce071980d9a2", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemusStealer", "colour": "#ddd7e0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787560194, "uuid": "3a20ead2-fc28-4792-b5ab-3333453caeb3", "comment": "Malware payload (RemusStealer)", "value": "b007e3f21dc382e21ffdc64e665444bc9494d1d67b82bc7ddf415ba2288af648", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemusStealer", "colour": "#ddd7e0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560194, "uuid": "544960ab-7473-484b-8e93-8f481df28db6", "value": "T1BF75231513E956A8D17263B189F2C23395307C159778D79F12E8AC8B7F33A9AE8363", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560194, "uuid": "ad49ce36-34d8-4ae7-ab94-c2106eb01e14", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560194, "uuid": "8f3e21d7-4601-4b04-be06-b77e8ee979bb", "value": "24576:jpyxNQfNF6PADvlQIVsoegaX0cH0AQMV/qB0DO+mDtGzJNaCFh9AXOFif/HO4r:jpKmlFuWlxegAHvQMFqB06+mDAzJNaU0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787560194, "uuid": "78959540-37e4-443c-b6bf-97a8f02edba9", "value": 1560064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560194, "uuid": "a8f23c99-b132-4406-8623-55d9f6f7f56a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c081615-9f96-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787560436, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787560436, "uuid": "f1371eff-652e-490b-a2b1-a3da20e23935", "comment": "Malware payload", "value": "7fef1713bea944c766f61edc335f2f1f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787560436, "uuid": "d92b913c-3f49-4307-8dd5-29932109d7a6", "comment": "Malware payload", "value": "dd47c743a645c635c5ab5124121de737f3b2f758064ed83611f15f245e4bb641", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560436, "uuid": "336e534d-6cc8-47fd-b19f-2f40e42802b6", "value": "T15834F062460A3EE7B0E93BDC230539F94F12A0008D566FBC507A647B6E1776AC3AD5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560436, "uuid": "f141b6cc-2d64-4ae3-b93e-9f65a92743e8", "value": "3072:TwpQ7pusToWBCDQlcoF8Xr08AbL5T2vyiWK9zXv4juoHRy+1g6bH1B:TF7pudKkacoFikn52KUAyoHr9Dj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787560436, "uuid": "1af75673-169a-4f92-b95e-a6a09b36dc70", "value": 247882, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560436, "uuid": "3b6b177b-e172-40b7-82df-aff14e9d013e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91bea8b8-9f96-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787560446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787560446, "uuid": "a369e7ac-5a76-489f-b800-f13451a2679e", "comment": "Malware payload (Mirai)", "value": "89d3564004c4ad5cbaf0eea61c25c5e1", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787560446, "uuid": "d2c363af-0cfa-47ec-a9ad-596ad1d72ecc", "comment": "Malware payload (Mirai)", "value": "bc852a450ebe388f8c170f37293bb6a2ec9c5b8bf0e205325db435890588967b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560446, "uuid": "4fd14157-089b-47a6-806f-80c86f0a8a67", "value": "T150B31A86BD814A12C5D613BEFA2E118D3323177CE3DF72129D106F2467C692B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560446, "uuid": "c9792b94-292f-475e-8231-aef182f0e29b", "value": "3072:y/2DlVYCf0qVqBOQnOfGTqxggUMj32obvqaSsvaf5ozlWDFKE:dmC9dKOeTqxggUg2obiaRacWBJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787560446, "uuid": "7b86f036-a7ce-4093-a3e9-c464ab86b5cb", "value": 107912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560446, "uuid": "e21db4bb-5afa-4efb-b018-3620962dd5d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5735173b-9f97-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787560777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787560777, "uuid": "80bf02be-c668-4588-9035-006c6bf7a017", "comment": "Malware payload (Mirai)", "value": "73510a43917288056b18c30c726c58b4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787560777, "uuid": "1e2b3108-3313-4ec6-af95-02cc21118612", "comment": "Malware payload (Mirai)", "value": "91586ada5fde2c340ff9790f9a3804843a2e501c252f06cf4e11156bf3095268", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560777, "uuid": "8d8ba813-8b8c-42ab-a854-84fc9f995035", "value": "T1A0836BC0E243D8F5EA5704785136F33BAB37F53A012ED697D769A932AC72500E5263", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560777, "uuid": "2fb84ec6-d6f6-4bd6-9d33-bbf2b239a0ac", "value": "1536:zxhDW6hnZhVMQ7fVRSY9m59BFMla57zua6Nt39GpGTvvI1Nqp436zcZF77MUue:zxhD1NZX3DVRSB5ilE7ChNt39GYTvvIZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787560777, "uuid": "e74c5e7c-7198-4b0c-b16c-3e5475c8332a", "value": 84180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560777, "uuid": "fe565d99-6826-4e60-92b8-40194b9c1e4e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f2965f8-9f9a-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787561972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787561972, "uuid": "fa52a4fc-3bee-45d7-b27b-a127e03298f5", "comment": "Malware payload", "value": "c110fe9a29d2dad74f17069f8db19cdc", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787561972, "uuid": "14856a8c-fe16-4bce-9cbf-83509b91899b", "comment": "Malware payload", "value": "9640beb8d8bd75d0b0e446ee7004c2d5b3620eb6981586246da15d2097921fd4", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "This_exe_triggers_specifically_to_cobaltstrike_c2", "colour": "#e63640", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787561972, "uuid": "647727a3-0b7a-42db-8b1a-f6aeb85e64ec", "value": "T1AE34F0B627ABDC502387AD5E752F7FB1825EC36386A53560A0D86FFC8066B9417318", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787561972, "uuid": "32ebdc8a-3271-4831-97f6-11bc9dad8781", "value": "6144:7bgeEcHHX1jRwDtlyVmDvFnB67lPV5VIFXrPF:HgeEcX1CDtlyVUv767l95VQbPF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787561972, "uuid": "06784a5b-4a41-4a25-a956-88903850c5be", "value": 247889, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787561972, "uuid": "bfea7fc0-d6f9-458d-a764-99143f32493a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c438717-9f9c-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787562987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787562987, "uuid": "3fe377ef-42dd-4742-9491-2321ec8aec9c", "comment": "Malware payload", "value": "5a713bb9cc2a9f7433196b2d0862906c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787562987, "uuid": "b88aac98-65d0-4e48-9dd1-9eb12c298ab4", "comment": "Malware payload", "value": "14e677085d54fdb350ba1ea2f4d4a23ad283cd8dc3a1aa8fa6e545b8443711d8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787562987, "uuid": "82b2785b-9f29-4220-81d4-f6fda19340db", "value": "T1A3B2E73140B61EA701C3D7A4BEAB5B4A9568521EDA93951C778CA9090BCFE7F88C33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787562987, "uuid": "31049423-6b85-4693-8006-379003e8f5f8", "value": "384:DsXn9r51sZN7WYlmvSsYQeVwxWZVZ9ammnN/8snjE7QPn/sFJ4:DsXn911sZN7Z4asSVwQZVZ9NSasnoO0Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787562987, "uuid": "7a25d7a2-92c9-4b47-9dc6-43db7d448b7b", "value": 23813, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787562987, "uuid": "acd78ac6-af97-425d-a95e-fd2464e46bbb", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d5270fc-9fae-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787570666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787570666, "uuid": "29c1fad0-389f-4c11-8109-78969bf2f7e6", "comment": "Malware payload (Mirai)", "value": "86d12f2e5514a733661545f54b9ca592", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787570666, "uuid": "b18694ba-2ee2-4836-8540-4b15f012d2bf", "comment": "Malware payload (Mirai)", "value": "939a999e03e1f80f3eb8e4e04b93c42339261e463e16582c2cccda1a28b57a8a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787570666, "uuid": "e64d9668-4b2f-4176-96a3-dfdcbfbce795", "value": "T106543A43AE455ADBF81FCDB0897DC3D22DE1A0CB51E1A93A65BC89CC7F6B10A05D34", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787570666, "uuid": "dd3e87eb-0858-41cd-947c-c337e4668907", "value": "6144:3mOTHZ4dk8JfLRYPhSxnhWLWDwu98c5Oq:3Kd9jnesv8QO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787570666, "uuid": "5842011b-c35a-4321-a814-021136b8ed5a", "value": 283728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787570666, "uuid": "d3127bd8-e80e-4ef3-b887-58a16189319d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05992e64-9fb8-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787574814, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787574814, "uuid": "ced3a619-7764-4738-8035-7af1945a04a5", "comment": "Malware payload (Mirai)", "value": "bdb83ef3d3cbec2f6305b3298e2c5615", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787574814, "uuid": "bf34f9ee-4e31-4e6e-8db7-0a6f2bbb1174", "comment": "Malware payload (Mirai)", "value": "79c8c8f24ee8ed9fcfd100149a792db90e4c6d1cbaf40dcf095a478f1f3c483c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787574814, "uuid": "9a3503b9-1cdd-4682-a513-d6d3f36a3d21", "value": "T1B9D36BC469E3E0F2E953857A4B6F671A4B36D0370119DA11FB2E28386F46010E7BB7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787574814, "uuid": "a23176c6-03b0-4941-b377-884c67ef34f4", "value": "3072:LTSZ9DlYZsURKHhYZePcNY5NrJpnProl+X+u1EssMZc/T03ImIys61X1h5oV:LID2ZsUif5Xm+XDEssMOgh5oV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787574814, "uuid": "85814fe4-5329-4f6c-931b-49c2372e0c96", "value": 140840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787574814, "uuid": "3b827c5c-8c14-4f70-bdd7-806efde6196b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "362bba6d-9fba-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787575754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575754, "uuid": "765b4841-4e06-4523-80e3-213ea427c570", "comment": "Malware payload", "value": "bacbc975bad8d6d9da276ecb6b609c05", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575754, "uuid": "b05321fa-8a69-495f-a70d-97245f6ab8d1", "comment": "Malware payload", "value": "2ec265546a41d43daa144fe34148a7214175fde6d197d839d959b3e231793028", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787575754, "uuid": "166be131-a9b1-404c-9399-d949ef528b0e", "value": "T13CF3E85EBBB23276721B8309FAC1B768916DC153EA011EE7BDB5F118CBC229201736", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787575754, "uuid": "c4f1edde-6615-4b10-b40e-8c77cdfc3f5e", "value": "1536:japAr5lURr4kjofmmkWl0Fr/vqLBavZWkOA4Y4hJgTnUX0vZI:Gd4kyA4vJgTtW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787575754, "uuid": "bc439060-ef73-4272-9c0e-dd576588c81a", "value": 157652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787575754, "uuid": "cf6277b8-f827-40c3-abc6-e2b899acee6f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43d35091-9fba-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787575777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575777, "uuid": "d891610b-6c64-4fac-ae1e-7fb69c27f4a1", "comment": "Malware payload", "value": "822d9758adbd2401eb16b7c0f13acfc1", "object_relation": "md5", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575777, "uuid": "f06eee22-3db9-4f76-aa0f-a1acc0272ad8", "comment": "Malware payload", "value": "97f5bd9347bb579899de04cd24947af7ea65f9c69fa91cf24435e71205c76a26", "object_relation": "sha256", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787575777, "uuid": "fc6c84aa-e621-441e-9d7e-1d9ef138588c", "value": "T187D52394B8F614B4D432CBB28FD3E56DB06A7799CBA04DA77BCD69000C53994AC3A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787575777, "uuid": "0d698685-c07f-4b38-be7b-60d33fa4e9dc", "value": "58f4b17816a07f7a36dd14e504d515e6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787575777, "uuid": "35b4a5e7-d034-4ae1-a92e-ab41e3db3bfa", "value": "49152:4DXHyo3M7/KHRDOWcxlFfRin12KXQZpcnUiqA7ZnFjhSo95lpea6p:iio3MTUB0Rc15Upg7ZnFjh95Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787575777, "uuid": "1538d62a-b9a3-441f-aa2c-e5336ace62d4", "value": 2953216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787575777, "uuid": "96e71c32-aea1-4b9e-9c1f-004dc4759acf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78e2aa90-9fba-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787575866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575866, "uuid": "46a7b291-0a44-4432-9cdc-09f88f701a88", "comment": "Malware payload", "value": "be1cc7a51a9b81e474c09df178519ee7", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575866, "uuid": "469299ac-101f-4d14-801e-d5a85a37a6e2", "comment": "Malware payload", "value": "d886e3faffa8b351edcb74c1e8eb50f6a015dfeb75b2efabb3b378f20f679e82", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787575866, "uuid": "afd665aa-a527-4aff-9257-98cf564734b1", "value": "T13811B1A619854C06233443A978A2F50DC447D14F0A8C6D907596907F65E67C2C9B7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787575866, "uuid": "175a415c-8cc4-4ef3-85f5-b8b6909ea6f3", "value": "24:0WT6StHRFBN/WN/7NoflzRfl6bqIOOPWyVgDM:0WnBNuNQJNKOOv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787575866, "uuid": "f974b45e-e24f-4b6f-8ecd-926ba98b2492", "value": 958, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787575866, "uuid": "faf0773a-2e38-4b35-aa5d-39f20b4c5826", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c26550e-9fbb-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787576140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576140, "uuid": "2399989f-f004-4002-8616-d5899ca85d98", "comment": "Malware payload (Mirai)", "value": "ab85e9ba4c8898fd7a23688525d99ebd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576140, "uuid": "b572040a-735f-4f6e-9ac0-70f0a28682fc", "comment": "Malware payload (Mirai)", "value": "da694c704985acd7cf42630f79ac1c3e1d1d41759367bc9d600c0bbeaadca96a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576140, "uuid": "e435621d-6b07-4767-a43d-055159439c56", "value": "T12734D85E2E228F3DF2698B3487B74E25975962C722D1D640F16CD1102F2029EA56FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576140, "uuid": "15b080b5-d85b-4b03-8bdb-34740afcfc62", "value": "6144:oH6ju27c0lfQxtLCCNdUjaHGzdvLKEssMOgh5o0y+mZ8:axZb8OEssMOgh5o0G8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787576140, "uuid": "99cefcf4-3c2b-4264-b51b-923674a6bb16", "value": 247716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576140, "uuid": "7d072ec9-adae-4fe3-835c-76a5404290ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5f0c0e0-9fbb-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787576452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576452, "uuid": "96958f4f-62d9-48b5-b06c-38a783f4c950", "comment": "Malware payload", "value": "34da53bd7fd116c2ff73dd711e5ee2d1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576452, "uuid": "133c8766-f5ac-4f09-9394-4c905b285967", "comment": "Malware payload", "value": "35b712d8e66bc64bbbc676b2a8462aca8868beda53b6c3b97a0cb25419e7e10e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576452, "uuid": "20969119-ba4c-4c21-a047-8e9b0c1dc95c", "value": "T1CD93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576452, "uuid": "937aebcc-c944-4f65-9e37-8030b8f1e6a9", "value": "1536:dap9kuEEwH8kw0PMqpYJKNoE+pTYeGf8BqLv3Tli0oRGpNuqYPPX6IH8LutVWw:MIuEEwH890j+pHBqv3Tli0oRGpNuqYPF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787576452, "uuid": "68ada1a9-4469-4ce3-80be-5c5c4ccfbdcb", "value": 89613, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576452, "uuid": "66cfe9e7-7157-43b3-a0e0-804d54793d5d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d73c83c7-9fbb-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787576454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576454, "uuid": "57f77b06-4608-489f-abe8-f995eb633e3c", "comment": "Malware payload (Mirai)", "value": "b6b58884d1ba135bd1712992cb69ffd2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576454, "uuid": "840974e7-3028-405b-a854-eb14024ffa28", "comment": "Malware payload (Mirai)", "value": "64f287ae4e695ac0adfadcf516773d8ad7a60bc7174005903cb443ec86d3066a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576454, "uuid": "7fa49ed6-beca-40f2-8954-6b32d1ff9926", "value": "T14E145BD3FC12D9BAF84BE73B89470409B130B65301815A33721F747BAF6A09556B7E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576454, "uuid": "51b5532a-3e89-4593-af13-c667d20ba34b", "value": "3072:kIYziQxkT1jEZQMJe3+wpn/Ku/VzjbiGLTKby0ZqWDu1EssMZc/T03ImIys61X1T:kIGaMJeOwFKuvLsy0oWIEssMOgh5oD8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787576454, "uuid": "4b3e3186-6906-4cbb-8a4a-08cc718b308c", "value": 203756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576454, "uuid": "3780e96c-0d68-4b7d-97e6-6ba4ef37a395", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e44d5b96-9fbb-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787576476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "81895372-02da-42cb-a0fc-10bb0feb5c72", "comment": "Malware payload (Mirai)", "value": "cb393f4b7a54ac63f57ea68102fdb3c0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "59a0c7ff-f0b2-4348-b7ed-b598945d47d2", "comment": "Malware payload (Mirai)", "value": "315b7d57c8ebcc6fb29aca562ce7c5ea7d0565556f84d35454e65a84bbe50ace", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "e98c9909-c69f-45a5-801a-b14a75c2f024", "value": "T111B26CE18F3A1F94E26443B4642187385B53E42AB74F0EBE162FA3618453D8DF1967", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "89d1a2bb-f35c-41d7-8197-e237e5fcfcbd", "value": "384:KG1lMaIPgfe4QFlCgg+Xzf38FmfIfRXomENGNXevVLZhdr75zoZ/ynTqBg7xpx:KG1KaIWe4QbCT+emfI5XV2LDoJuvzx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787576476, "uuid": "c5cde3d4-f87e-4368-95f9-e242d2a4ee82", "value": 24544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "1c3bf7ec-84b5-4be5-a56f-d6fb84eb19d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4536b9b-9fbb-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787576476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "173e67aa-ffc8-4b64-b7f0-8ebddbb41019", "comment": "Malware payload", "value": "ad15f40771aeb982ad0b1ba84d4c90f7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "7fda5192-dcef-4643-af15-2ad980711f83", "comment": "Malware payload", "value": "a81fe4c2a51958d1f6cefdef18905590ad507281dca2c87d73b6a26ea99327a5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "114507c7-fba6-4aea-a2eb-d4b81a2398ab", "value": "T1D272BF9DC4A57B8FCFDD2E7C15A427702D41F090632E8F4DA3158CC5B31A606B88D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "aec6f655-fac7-4d93-b647-37daf9a05eec", "value": "384:cxjFfh7KRhyAYjiJiwSKT5Yye6eoxyGgxRWGVCz+uyQMlx:cxjFp2Ixji0wSo5eY0bWWBQK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787576476, "uuid": "2502feab-e47e-40ce-8792-89fbbdb36833", "value": 16908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "573e5e57-45ff-427f-8ac7-5014fe36acc4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4539eaf-9fbb-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787576476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "e9821d5c-d3c1-4b1e-bbbb-be9ed8fcfe58", "comment": "Malware payload (Mirai)", "value": "62f1f60ff0726faa96325abf61980fbc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "48101a21-584e-44d2-a2fa-76104d6db58c", "comment": "Malware payload (Mirai)", "value": "1fda08c75ae792e0c5dd76761a07c3e8e939dc29ee05c72327fb8f9a26ab2b08", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "492a80fb-3359-4c0b-9997-59f387e6c832", "value": "T1D5C2F7FDF502A9ADF84EFB3EC401410D7A70A72550411A7537AAA937DC333A8193AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "d7d29da0-ce2c-4389-bfc6-e4f70e0c2ad4", "value": "384:KPda6gfFNg0fPL7WAlJFLMhOmJpcFuSZ8HAp3KV7Khb26oNuIkfabiQcMs:KVavfFfLW8FuA8E3Kkx26kuIkf+idMs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787576476, "uuid": "225c39b6-8e63-4ab4-b205-f0e4699adcc1", "value": 26456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "0f781355-17a6-4351-bb38-30de086f9a4f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e457c930-9fbb-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787576476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "0ea366a2-5629-4331-bb85-9aee60ca1835", "comment": "Malware payload (Mirai)", "value": "abc1dd9047771baab8fef7db89f11cc0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "d7daca26-ec42-45ea-9d0d-b7207a5703c6", "comment": "Malware payload (Mirai)", "value": "3c97579c6efeebf9516c882f8634a498573c8871eb6fa29cf8b2e5ff7f42bff9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "1bc41806-fa66-4d1a-acff-cfcc7311303a", "value": "T181B2C15146808A6391E60C3BF977D302D3941BB549F7793932744E2CA3DA6DA27B83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "4ba6be63-0771-4695-aac4-a6019d086fc0", "value": "384:xag3WjvMR52Ys5Mf7lyRONcru9kGFrv+bFJ6Dzt+Kr1K7omdGU55YMowf2E:L3WjvMRsMxKOD9dvW2zRE03U03wfp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787576476, "uuid": "64719168-0468-407d-afee-33d7a18fe0fd", "value": 25312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "9a318b5b-9823-4a8b-a97c-102325cdb381", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e45d4ffe-9fbb-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787576476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "549ca11e-e9cb-479f-b372-9212f21b8845", "comment": "Malware payload", "value": "c6a98f5e9a1c998248f3595dcf0203da", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "ed58666f-452d-4a1f-9698-934276f06599", "comment": "Malware payload", "value": "bd659b795fa6b5afd7e2d63341a5f598cb02055d6d4e8721abcee9698bc53236", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "84e7db1f-f8a6-414d-8029-9ebbd13a7d6b", "value": "T14ED21A3AEB724913C4D499B895F3832CB9F9425F647D4A163C6B0EC4EB91AC06113F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "ae0f6631-a2b0-448c-8bde-5d94bab33ce5", "value": "384:6ysT8AllDko1OxoUmdKzN57tSezXasmFFU+pph1K7R2h:6ysTZ3OxoHqBNeO+3K7Eh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787576476, "uuid": "ff56eca6-41b1-4283-879d-6f958c164edf", "value": 28836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "c3ab2850-a1ee-4003-b746-f322684e2316", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e45ebd7b-9fbb-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787576476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "4d2d4d14-7b32-4dfa-8a94-4567d4c51c52", "comment": "Malware payload (Mirai)", "value": "018c21a952fcaaeb90ed5aea53585553", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "c3f21e2b-f5ca-4338-ad48-91ec4c2c18d1", "comment": "Malware payload (Mirai)", "value": "21ba21ea41967d3f8d9c3e08bbc2dd5d865c2ac12afda9854b7531ec01f06bd8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "51ead9ec-6e54-4ebf-834f-05321ade5b01", "value": "T13DB24C86FD814917CED11137FA2E828C37664BB4E2EF3307AB265F642746A1B0F3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "eee04811-decb-4b21-95cd-c5859903092a", "value": "384:Zi1e4fKN9F32SkSb1TGdAy31pBGST5efRBjMeY/Fx4e:ZaePt32SVNGWi1jdQjMex", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787576476, "uuid": "e1c0c647-f482-4d09-ad03-6a08fbb8f35e", "value": 24600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "700fac34-99a4-495b-aad1-e4bd0ed94f93", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e463ffa7-9fbb-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787576476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "0de09a80-50db-4434-9c7c-4e6ee7fbcd0a", "comment": "Malware payload (Mirai)", "value": "49987846e8484eea91209ddfb4576cdf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "e5b652c3-ca6f-47e3-ab51-83b0ceb683b7", "comment": "Malware payload (Mirai)", "value": "3716b6d1d428dfc45655a8bfa6bcc5141ece16cf63663f12996d5678eaf13a48", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "0bbc7bf3-a703-44fe-a635-2c8c30ab8567", "value": "T10EB25B86BD814517CEE51176FA2E928D37665BB4E2FF3303AA261F642742A1F0F3A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "a44c3c75-576b-4b18-8ba9-b52440b2369a", "value": "384:dG2m2FfIQp9Mgj6JwqQ87+2eZvaBcjQOF9hM4tXV5aceBy6jdmFx4e5:dfyRVg87+zvaOPFLM6qy6jF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787576476, "uuid": "f1e3bf8d-5602-434c-b156-1eb04a0175f3", "value": 24504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576476, "uuid": "84b8026c-648d-4308-85cd-135439b58c67", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5cb7658-9fbb-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787576478, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576478, "uuid": "18464ed3-9d73-4906-8338-4b076cd5c3c6", "comment": "Malware payload", "value": "07b6a1fc1f2ba6ce901ec0aa7abf7a80", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576478, "uuid": "269c03d7-489e-42f1-9047-c957f0e43f1c", "comment": "Malware payload", "value": "c33601b5d1bc12a29b51c500b60d1bd61c36c8919c108c5dffb8c7f5b56321b1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576478, "uuid": "1e983a7f-a443-4342-a28f-ec4cfac5c064", "value": "T12372BF67D3E60508C27D50721C6F3D082D65D20AF18C99F77AEC707B1022B663D2D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576478, "uuid": "a5211e47-a20f-4c08-a5d6-2a34e5dc6a90", "value": "384:My94BjdrDUZRY9A+/xV1c76N3Cau1q6oANaNJawcudoD7Uqe4cDMmz5tIHv0F:594BOp+S2N3C1Y6KnbcuyD7UDMuGP0F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787576478, "uuid": "1554d48e-3e9c-4d53-a928-895dfdbda0bf", "value": 16036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576478, "uuid": "73c63d5b-f59f-4e7e-916d-ed2a14a9594a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5cbeb6f-9fbb-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787576478, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576478, "uuid": "f3e76513-1877-44f3-992e-6806738e4b84", "comment": "Malware payload", "value": "e11bbc99045129c4cd35163e2dc5da15", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576478, "uuid": "d59f19c0-f861-4462-9c7b-3800b3b8b55c", "comment": "Malware payload", "value": "3f35f7f9d37d8bfb2f861c9d61a6696553189897acdecb6fef5dfa95fe88470c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576478, "uuid": "a016366d-90c5-4d75-b493-d7428ddff117", "value": "T14482BFF7E3AEF7B8CD3FA9B2891452C4FF203C14B013979A0975A27E98FA90424117", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576478, "uuid": "f01377d4-7902-4991-a639-3f67a3fa61da", "value": "384:Av0tltUYGrkN3tkuNZz58OA3FQjPxJoBV2F6Ufk+nUxaVXALppkXP+GxL:E0tl6YGrI3tZz58B1yxsVOfPdNZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787576478, "uuid": "e94db9a1-9d06-4ec9-82cb-4423788e2249", "value": 18656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576478, "uuid": "1551db82-0fba-4795-8737-69c266f05511", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5cd9fa1-9fbb-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787576478, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576478, "uuid": "ee2bfd64-0d95-4b7b-97c0-6823a3da9a63", "comment": "Malware payload", "value": "d7d70e2f0bf2fc3eff2f3b4fe0712687", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576478, "uuid": "99d4ee84-04cf-48a1-8922-9417973ece23", "comment": "Malware payload", "value": "bef057527f8fbbb1ef79860ae831cfcc11b6e28dddeac6424cf7e7b70c14a491", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576478, "uuid": "cb5c99fb-75e1-47c7-ac36-a6046139dda2", "value": "T16472ADE7A026F5F1C531BA7A18140AC4EF6368253913870706E473BDDDB5AC86924F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576478, "uuid": "75b03575-1646-407d-95ce-d71e460babd5", "value": "384:QLu2HCUhIQKNdoNoSgdYiPsknUxaVXALppkXP+Gxm:gtHNIQK0ilP/dNA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787576478, "uuid": "d37d21a7-fa27-484b-9973-87db0182e3c2", "value": 16756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576478, "uuid": "5b76ae51-5bba-4384-bba8-8b8bca4ec706", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5df1275-9fbb-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787576478, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576478, "uuid": "c565d83a-0615-4d0a-97d9-f606b4920e3a", "comment": "Malware payload", "value": "46d758604055f9683714750ed65a1baf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576478, "uuid": "637e3dc3-45ce-4ef4-9274-567e02a41cae", "comment": "Malware payload", "value": "e61f27b4c26ee54df5d8bf2149cf4ba8b2a61a4ba5217140b218f28499945eb1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576478, "uuid": "65f305b5-2a93-4c17-aff5-3b066694f31d", "value": "T12562BF23E1A70BC0E75D903A0CBEBC8F1418E00CE71C55A6A7A872BEC552F653C0DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576478, "uuid": "5126cfcc-7b6e-4ec6-9628-f6629c23ad1a", "value": "384:MiZeCivRadYdy/nfBD6AKzLxHgKK0VVa0ANaNJawcudoD7Uqe4cDMmz5tIH7:YCiEP5omKK0VVa2nbcuyD7UDMuGb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787576478, "uuid": "b7406940-db14-4ff6-9c8d-0bee252d8f93", "value": 15888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576478, "uuid": "2e91d9f1-0e9d-430d-a7f1-ec21a8d6c8aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5fecef4-9fbb-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787576479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576479, "uuid": "c41e83ef-8846-458e-8cda-654ef2b34bac", "comment": "Malware payload (Mirai)", "value": "8c088b5dd869b8c682ebaebfbc616367", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576479, "uuid": "5e531451-1cdb-4d16-8a32-f3eec425444a", "comment": "Malware payload (Mirai)", "value": "be5d432f96af021393acf6bee8d2f7c1f246dd21165ef5feb74d5aeff7a9b0d5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576479, "uuid": "415e8651-2201-40c8-b1d4-0859b9ea43b1", "value": "T1D492D0258257AB82C5B204B6A1254E8BFE3A9131F1EB30402271B774DBD7142FBF22", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576479, "uuid": "ae1c5aba-ccfd-4e30-88b2-a73e6554d3ef", "value": "384:bs8o6sY6ut0jEumRVPIrMOkuB4we03wrUUt8mdGU55YMowfi:Hxt8mrP9OkuqwegEJt83U03wfi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787576479, "uuid": "ce56d030-ef74-4470-a63b-2346d23bd0b4", "value": 20712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576479, "uuid": "b01a0fd9-ff64-4c2d-a814-e6b20ce4d525", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e60b22e8-9fbb-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787576479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576479, "uuid": "73959c66-92f5-420b-918b-57ba2e4cd90d", "comment": "Malware payload", "value": "8985d3902239e7f05c4c55d958509588", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576479, "uuid": "f482a952-0c2f-4ff4-9a48-ad863af0ecfc", "comment": "Malware payload", "value": "fa94e79e7b8a1a632903ba308e009d5f00016f282c401fcf65248adc8b5256b1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576479, "uuid": "942e041a-0ac4-41dd-9928-d8fbb0890216", "value": "T12062BFA9D2909C67FB7B29F16949F29577FE0F8D1978CED260D0DF9133262209A10C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576479, "uuid": "9e3c850a-84b7-43ab-a8d4-b5df7f82a25d", "value": "384:QmJ4FLkHIa4w+IAN7ib5kLCt7kM4uVcqgw0Oqetyg:NJd4N75m774uVcqgw0ret5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787576479, "uuid": "80cbce4d-1bbf-4845-ba2b-28a90c1c8252", "value": 15220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576479, "uuid": "84b2b6fd-e0cf-471c-81e7-688a316bad48", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c98f5cb-9fbc-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787576543, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576543, "uuid": "b01aa2de-636a-427f-8f5f-11387a76a0e8", "comment": "Malware payload", "value": "d02619ad03113eeb5c338faa227c5391", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576543, "uuid": "ea823850-5fa3-4e90-9287-9c2baaa5c1ff", "comment": "Malware payload", "value": "5e4d0a9c09b59bb57071802371386c670fd1b18cbb5140be6f1715bd1309efa1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576543, "uuid": "5fb8202e-7cff-42d7-bb5f-e1a94dad3137", "value": "T1B472B0AD5B0521E3D837547213A803801C390FFADD03DC6A6699EAD3DD09CE5A1E77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576543, "uuid": "01d698af-13e5-464f-94ed-368a8cbba3dc", "value": "384:anxMbDo/EqEFZTOkQyT5lNJgGlzDpHyKbP1dCRMZ:Wxg8vEFZ60bNJgGlzDpjc4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787576543, "uuid": "e0313a1e-7e1e-49d2-9c9b-068da19ca2f7", "value": 15972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576543, "uuid": "2c445b27-185a-4d29-8eed-ead5f09ec86c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d33a2c1-9fbd-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787577001, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577001, "uuid": "93eb017a-575b-4ffd-bd39-1b927fa1f31d", "comment": "Malware payload", "value": "e70acfa0eb7c72603aaeb387552e2f8f", "object_relation": "md5", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577001, "uuid": "bde57a06-b848-47ef-b912-cd96497ebd8b", "comment": "Malware payload", "value": "231fa12af4e31d6bb5252f0fc5586601f45736d578375fe2b5999c444f7bddd0", "object_relation": "sha256", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577001, "uuid": "b3e9c377-90f8-4623-b1af-73dab43af339", "value": "T1F03633A5BCD575B0C066C32CA193E42DF33E7F918462BD8B77CC2A104E67A19293B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577001, "uuid": "dce1a804-ef54-4e11-bd38-7b90207cf950", "value": "949ec789a5933fb6051c9013a550fb57", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577001, "uuid": "0dcba511-c44c-4eb4-8310-7ed9dd61587a", "value": "98304:N0pMmlpE4o9JmoUw3k9dXVjF44rp2wprp3FHwdCB1ZUgnuuIfjB1g:N0pMmHHoDnUfp0QRvZUSuu0B1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787577001, "uuid": "cec0c1b7-15ef-44c0-ba55-72ba6fe3f7f9", "value": 5290496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577001, "uuid": "cdaf739f-e1ca-4efd-92b1-5e180fd034c5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "690d03bb-9fbd-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787577128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577128, "uuid": "e20f06ee-367c-48db-a656-5c581e511a96", "comment": "Malware payload", "value": "2e7a95b6e3de92926e5c3c5db59b213d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577128, "uuid": "f3d46225-2f89-4afe-83ad-2db0c557c354", "comment": "Malware payload", "value": "588197157412404247076382b843d6b37162a37ee47ae42405c2e6c31c99fe24", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577128, "uuid": "01228c11-da0c-45d0-8423-f5c54849223b", "value": "T152F37B0A72E510FDE1779239CD951A05F372782607209BDF03A0077AAF276E16D3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577128, "uuid": "aa9f6f92-9ad5-4490-922f-df8441d4caeb", "value": "0e59af4335b2d7add8de171bd85959b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577128, "uuid": "95a3e7ae-32f8-4e1f-bc73-dbed9e580f34", "value": "3072:id/0IJTBhDJkGOZAVBpJn151QUCAfhTKnE/vOr9WGydaB:i6IJXqGT91IUCASZaW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787577128, "uuid": "f500a72c-af99-4dd6-aaec-4f7c1b7d8265", "value": 168448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577128, "uuid": "15c76a13-03db-49a2-aa4b-4c53f210191a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69771b3e-9fbd-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787577129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577129, "uuid": "8ed59548-015c-45ca-b5d0-b5f63322e694", "comment": "Malware payload", "value": "ab231fb5eb8ec8e3d243a2937d2c8882", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577129, "uuid": "797f2852-2794-443c-a126-a10e9be45a21", "comment": "Malware payload", "value": "0191133b622f9729ebd313976e44e311a9c17e5fd9f8600ba3c9dea0f649a809", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577129, "uuid": "0ca039b0-4a96-46d9-b5d8-98f91dec536b", "value": "T16D95124FEA5906F6D53AD0B884066602FEA1BC1607209EEF27516E760DA3FED5F387", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577129, "uuid": "20820523-1957-4d25-a96d-35d780cb11d3", "value": "2ec3493fee0a968668bc5969e1a514cb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577129, "uuid": "54323f62-030c-4031-92a2-31ab7116ccc2", "value": "24576:yJW0hJdR4CT9G2Rpo8atIDk65FvOeKT1DcM2Kc3gpsGvXg0jP6WlafcbXyLfq6xk:f6atIHFvOtTpofUhP9PTqfrxNRDky", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787577129, "uuid": "8acb25ee-0ac2-49fc-ac25-317c58fd3bd6", "value": 2021888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577129, "uuid": "168a92f5-7309-469b-81f8-ca60d865b996", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a94515e-9fbd-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787577131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577131, "uuid": "7b8d1caa-b066-4b4d-9989-22496c2e7909", "comment": "Malware payload", "value": "6d24bf7cef37601c74065784fbbca49a", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577131, "uuid": "4c3a2ee1-37dd-4fda-a0d6-717f81b4c4ea", "comment": "Malware payload", "value": "62a2c395281c39442e6219030cc775afef84fb7469e50670e15f5a911a8e2561", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577131, "uuid": "de32ca50-0afc-47d0-adcd-f492f251dffd", "value": "T1EED5334DFE0B7CF2DD6A1034A2EBF26F820E3A21D023ADE9DB6D4F624504DA1751A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577131, "uuid": "ffae9cec-eb22-44d0-a023-c2cd0037fbd5", "value": "1f2702872592229d2f4cb1162cfbc55b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577131, "uuid": "0060d76d-5116-491b-af45-7adc8507a425", "value": "49152:+rFEG8RyLMV7eAUWP8gDKCICwTjhZ07cX6Ue9KUN5IyJuqfVmCj5zDVZZHFJ0Dj8:+r58Ryg1eAUWP8GpcxAdN6TqLtzDJ0M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787577131, "uuid": "127d0f7d-a082-4dcc-8f3a-28cdfde24452", "value": 3001044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577131, "uuid": "f06c5780-7599-474f-abe7-9f709df33a00", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b08ebbc7-9fbd-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787577248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577248, "uuid": "b5353f3d-012f-4e03-b303-dfbaef12e2c4", "comment": "Malware payload (Mirai)", "value": "d9e1aa50098eb86621897f32d711fcb5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577248, "uuid": "bac8b418-3ff9-4830-adc7-02553637e562", "comment": "Malware payload (Mirai)", "value": "884d4aed509b9eba0c7b7cb4e0d98153707dcba323c95a28cbc38629e23d5de6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577248, "uuid": "deae7bd7-daea-4dd1-bf7a-648b77aaae70", "value": "T1B5C36B72CC252EA8C126E874B0788FBE1F639490558B5EBF2867C3714053D8DF91AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577248, "uuid": "bd4cd471-20b1-4647-8938-3c5f947c1531", "value": "1536:p25c+IVYeuJyXFO5MUYawBCeUKe49JGkvV5DfPWdKIhqCAbym:p25cTVPuJyXErYaAzekvVVPWoIhmem", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787577248, "uuid": "c51de027-f5e1-4206-9df7-d6ebcf91f0c7", "value": 129668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577248, "uuid": "47026e1f-23bd-498d-9ec9-323318626c06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20dbf0d6-9fbe-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787577436, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577436, "uuid": "f394694f-99eb-4514-af05-76c60fd3955f", "comment": "Malware payload (Mirai)", "value": "df0fecf5c11e8d81a1e825e369265312", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577436, "uuid": "ee3e18e3-8b9b-4734-9256-09ead4e76534", "comment": "Malware payload (Mirai)", "value": "3922cdf20694b7e2ee02eec17fa0c6f47688f8ac7a5ecfdd594f3461688ff847", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577436, "uuid": "77e58eea-91c1-40b4-be39-192dde851337", "value": "T174140852ACD29B12C6C2457EFF0E514E33136B6AD2CE7212BD1C6B703F8A47B0A7A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577436, "uuid": "f07cdf7c-630b-466a-93d0-d41b1f0c8490", "value": "6144:+30ZopTvSeXg550rRmTXXjYs1aDf64slZDTEssMOgh5oC:tZopTvSeXgb0rRgXjV1aDi4gEssMOghR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787577436, "uuid": "729c24a8-23bf-4a95-869a-74424ae8b28b", "value": 203696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577436, "uuid": "ee8ed1ed-3a58-4a7e-adf0-5b9cc0f1fce3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e5f626b-9fbe-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787577513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577513, "uuid": "24cc59a2-6cd1-45d2-81c9-a158685feb15", "comment": "Malware payload (Mirai)", "value": "c5de64fc280147912277807df6a332d5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577513, "uuid": "a0ecd1fa-ddc5-40f5-9491-09bdcb648128", "comment": "Malware payload (Mirai)", "value": "cef0d49988aedc32523afd71fee671e90fb9c8d7f15990b69f36dd7caaf8a07f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577513, "uuid": "a4d40d0a-13f3-4de2-af49-61fd11551054", "value": "T17E33F24C82C82EC2FF6B7DF19D95F5D417AE5A2625E58C9331E4C72A2641CB21B60E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577513, "uuid": "78efd271-1686-4cdb-989a-a4ee20b99683", "value": "1536:KPUjhMYitTyka+ars3CBpXAb2B6gQ3afM4u+qgw09V6:x3STynrsyBpggmiM4u+qgwF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787577513, "uuid": "aefb6975-4499-423d-aefe-2fb3c9e8002e", "value": 50580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577513, "uuid": "a8dac927-d719-4655-8bfc-371a4ff90417", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4eed88d9-9fbe-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787577514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577514, "uuid": "b6397ac4-9c3f-4c7f-83ee-35edec396ae8", "comment": "Malware payload", "value": "9bf46713c0686dba722388a4fa4a9165", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577514, "uuid": "4a5730df-3de9-4d60-a7f4-698580361ef9", "comment": "Malware payload", "value": "dba16a035056b18f14b975f86b6cae40bab0cb0ceb970737a7ca24b0eb5f3dca", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577514, "uuid": "3e141cad-e691-4571-93b9-b9e7f55e04ea", "value": "T1DDF3E85EBBB23276721B8309FAC1B768916DC153EA011EE7BDB5F118CBC229201736", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577514, "uuid": "11c6c45b-9eee-455e-9ce3-a42ba7bad40f", "value": "1536:5apArYlURr4k3bpnIPMAyCJ/Wg+jrF0o1iF4BNhYTynUX0vZI:Ym4k4F4FYTytW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787577514, "uuid": "0a6c892c-5d89-4191-a288-25f7682f56eb", "value": 157603, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577514, "uuid": "124bc9af-250c-45f6-bbc4-6f66f784f93c", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e1437b0-9fbe-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787577593, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577593, "uuid": "fd8ce853-f79d-4507-8313-cfaef7d73404", "comment": "Malware payload (Mirai)", "value": "cfa097f61260891ea641322f321209d6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577593, "uuid": "3dc9606b-57cb-4787-80d4-742bcb15042d", "comment": "Malware payload (Mirai)", "value": "d487bd1fa0855abac116c4ce865a3077e5fa2a32c33c94b3196b5a7932f71936", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577593, "uuid": "95ddb4d5-d059-4c27-912d-dd9a41d6cbe3", "value": "T1EE145C1378E290FDC9D7C1398F9FA016D522F41B1124B21A778D7E652F4EE30ABAD6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577593, "uuid": "7d30dba3-0007-4877-b3cf-4c3d4524b0c6", "value": "3072:knrspPoMhAnK6Q8leUtLwSDLKY/LjNfS0U5ILlD6TAu1EssMZc/T03ImIys61X1n:Kr2ouiS7UfTlcThEssMOgh5o6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787577593, "uuid": "e9f79082-8699-47d0-82b6-75db84b3764e", "value": 196600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577593, "uuid": "0d55b42c-c67e-443d-8809-42c42f79f330", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f6fb50e-9fbe-11f1-8686-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1787577622, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577622, "uuid": "87dab545-1d3f-4f0c-ac24-e329f2cd1885", "comment": "Malware payload (ConnectWise)", "value": "d2ec5f59910df2ea39273b0911d6f1c5", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577622, "uuid": "79c94f4d-caab-422e-bff5-a22fc333b956", "comment": "Malware payload (ConnectWise)", "value": "d5a73042f74b42cf6ccca6679ae3d029beb458c2647a44878d51d2bd840d60de", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577622, "uuid": "9760381c-7a59-42a7-8c9e-de503889cb96", "value": "T125D61211B3D594B5D0BF0638D83A92656B35BC008B66C6AF6394B96D2D33BC08E327", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577622, "uuid": "7a623ea7-7628-442f-87cf-f6ace9333284", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577622, "uuid": "44608f49-2d93-4aa9-a04d-2f145dfd5241", "value": "393216:Dq5VDBCDx/QEGq5VDBCDxOq5VDBCDxDq5VDBCDxr:DpqEGp4p9pt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787577622, "uuid": "6ad647c2-945a-4566-991c-86058222ba51", "value": 12807224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577622, "uuid": "027003da-5166-4ff3-8635-ecbd432bb28d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1250e6b5-9fbf-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787577842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577842, "uuid": "b634fbc6-5424-441c-b345-182607de812e", "comment": "Malware payload (Mirai)", "value": "8c3c5f11daef4e93358f02ba7220caea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577842, "uuid": "a57891be-cd8a-45ee-b3d8-aac5339d0899", "comment": "Malware payload (Mirai)", "value": "8dbfb51d784d840bfd4895610e203655b23a0d53ebfea2d8fc18025870c18551", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577842, "uuid": "3f1f1c7d-f92d-4298-be1a-cb628c5e5118", "value": "T1E733F1730AEFE671D68994B68D1145CEF02A884773C31B8701BD5EF918F78669AB0F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577842, "uuid": "5ff9f7dd-4f2d-4e83-a7de-be7acf7573c0", "value": "768:ITwx6MTEcesecq9o/DN2QK2coGCxlDdqlm8ATdYMDC52B6cdNeiYDzXurp5l8Yh0:IWfO96goGCf5WApY2BVdNvmad5u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787577842, "uuid": "9e7f3910-128c-421c-b0b6-271f8a9305c0", "value": 54524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577842, "uuid": "f8cc20ed-1b01-4611-96e6-6259964907df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f98ab75-9fbf-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787577998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577998, "uuid": "8008e7c5-988a-4607-8970-af58a3f291e0", "comment": "Malware payload (Mirai)", "value": "694c27d8cb0101887d2e2d01b328e69c", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577998, "uuid": "82714343-6957-42b6-8096-b3d70412e687", "comment": "Malware payload (Mirai)", "value": "45c4d75c175a8e82f68901cb2846ab9efa8ea270739dd58534e25b3cc474251b", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577998, "uuid": "fb71a7e2-8b4b-4269-acf7-4641d4e3f63c", "value": "T10733022232133C5381E3A03AFA705F8734149A7AD137C57A8B54D3B423D66A9DAF25", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577998, "uuid": "5ad18c3a-2f09-41a6-adcb-f1fb42d295a5", "value": "768:tRdAqXV4BrB8nmzBIalTWVnPeiaSH3aaD0qQmuhlmBwWaC7T2Mr0eBRmts3UozC:V5l0B9zax9PeOHK42muTmBwVP20eCwzC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787577998, "uuid": "30f097bf-4da6-4778-86c8-8a4168745d58", "value": 51596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577998, "uuid": "8c400b14-ea42-4365-8806-a497022d9034", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d938eb44-9fbf-11f1-8686-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1787578175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787578175, "uuid": "0cd98b87-33c4-4bf7-90c0-01e75638ccf8", "comment": "Malware payload (Amadey)", "value": "fe415557ba8004349316645525c793a9", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787578175, "uuid": "3dfea711-999d-4d2e-aead-7d8f63e5e870", "comment": "Malware payload (Amadey)", "value": "3f050137b9f180dc883989c7717227cedfeb4c72ebfeca415578b8c5a875fa6a", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787578175, "uuid": "bfa4b65e-7a0e-40a2-ad0b-8b3618f34171", "value": "T1C204024363FC4238F0B56978A5BB9901BA76FFD0AC7DC45DA099700D49B7A74C5B23", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787578175, "uuid": "d03fd73d-f6f3-4c23-afec-7bbd5060e3d2", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787578175, "uuid": "8886aa91-675c-4196-955a-90a5e1481fba", "value": "3072:R8btTfnelD+aL26Ogi52ztMX/kipPTq/jLfuDX+gUy1i4woUDQut/T0j8z4OFOto:R8b++arOgi5Q6X/u/nfuDX+Uo4woUDQn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787578175, "uuid": "0920bd80-05e3-47a2-865b-45dfc6b26bd8", "value": 180736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787578175, "uuid": "627b797e-d8f8-41f5-92b3-4e02c7d3cb65", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e06b99a-9fc1-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787578774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787578774, "uuid": "4bddb8ff-5a03-44ac-adff-5d603d0bb5ac", "comment": "Malware payload", "value": "1e7afaa8ae07d25002358c8a453a12ad", "object_relation": "md5", "Tag": [ { "name": "d52f85", "colour": "#0e6ffb", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787578774, "uuid": "b54b8adb-0e7a-4522-8c6f-8ab804ee11c3", "comment": "Malware payload", "value": "ea5b61bc8d140124753c3ec265b5542e0dc5323bfc613e365339a4819808360b", "object_relation": "sha256", "Tag": [ { "name": "d52f85", "colour": "#0e6ffb", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787578774, "uuid": "fa43cee8-5ba1-42af-9374-35e760958bee", "value": "T18974234662D7678CDCDE9834039931C3AE0F777CB985E77A90AED9AE33609348E458", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787578774, "uuid": "99a2ff0c-51d4-4cb5-bf64-a686f103f723", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787578774, "uuid": "7b01ec90-48a2-4954-8aeb-8ea80a48b6f8", "value": "6144:Ni17fe5lQvi+WglLT7SfvujsJOYasCbKY0qEluDeVplyomdL0L09yXRy3oy2UVIv:Nm7fekvi+WgLT7Sej6OYHCbK3qguU+dw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787578774, "uuid": "4ed5d70f-f001-4c8e-b006-063a0dc25f30", "value": 363008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787578774, "uuid": "958c747b-096a-4452-abd6-8ed72c725558", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5dea20c7-9fc1-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787578827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787578827, "uuid": "b5ddda38-8937-4ae0-b826-227d25025066", "comment": "Malware payload (Mirai)", "value": "bc29e8d954184b9b22bd64d64321acd5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787578827, "uuid": "009e4673-4892-4ddb-a7da-c0a7036139a1", "comment": "Malware payload (Mirai)", "value": "115a0417eb49822f8fade16ff1c76bf0b913104b178f69c5102e3f20feb10140", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787578827, "uuid": "e8cf825e-731f-4479-bc5a-54ebc592d382", "value": "T177F36CA28CB36E10C6578479B2668A3D1B13E423424B6E64B47FC2B45F43C9DF2A57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787578827, "uuid": "4263e259-68c6-4249-b345-b5f1164e823d", "value": "3072:rxv5CwOPC1nalWe9128/t0py55WeE6JCARu1EssMZc/T03ImIys61X1h5o7:rxTO+Fe9128lv5ketJCAaEssMOgh5o7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787578827, "uuid": "2df0a2dd-1174-483f-95f2-a949bf156629", "value": 170864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787578827, "uuid": "c33398e8-7958-4dba-9cd5-5a06d587073d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0a856a9-9fc1-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787579047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787579047, "uuid": "4deb4652-2000-40ea-9c28-d65d11821965", "comment": "Malware payload (Mirai)", "value": "411bb01032ea9ef27d8312c2599eaf0b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787579047, "uuid": "24b14012-7b6e-47a6-9684-436988ba4b60", "comment": "Malware payload (Mirai)", "value": "360d3d35c8d098c9798b1563e98d83e4c5da4fc55e50b11a156ff6b2cc3e7b97", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579047, "uuid": "09d2551a-1b28-4757-80b3-1bfe600cdd3b", "value": "T174E2E1BDDBE54A08E5BE81795EAFBD06C490E10B9571C77183D8B133588371A0A28D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579047, "uuid": "c5c2c191-2b68-4f51-b13a-ff8de00f2d89", "value": "768:zeS29fQYea6VzykApEA9lh8A/H0gnbcuyD7UkWykkAJk:YSYVG2RiATt0gnouy8kzkkWk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787579047, "uuid": "5a5aa5ad-4b4d-4834-9bbd-0c7ec46829d7", "value": 33020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579047, "uuid": "870ad4aa-b853-4481-840c-858e3f544c38", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc429091-9fc1-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787579093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787579093, "uuid": "77aaa022-89eb-4e07-aa74-a50cd1b25936", "comment": "Malware payload", "value": "f8cdded1f507af3aedb2e2ae7586795d", "object_relation": "md5", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787579093, "uuid": "f3028656-ffc1-4f10-8ecc-3a17bbed7d89", "comment": "Malware payload", "value": "0b2b93f1484b978afb009f3eaed08ea9b9c883639af9c1dfed8089c41c22011b", "object_relation": "sha256", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579093, "uuid": "49a21cf3-b966-4af1-bae8-36fde14ccf0b", "value": "T1B4D52299FCF60971E872C7B752C3A0BDF12A77858A745D9636CD2B102D12A282C373", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579093, "uuid": "0643996b-4b96-4ea2-9a65-8108e3251404", "value": "5a2ed47d8c6c6433dbc831d38c92042b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579093, "uuid": "947b60d0-cf68-4d94-93bf-9d9eb969d8e0", "value": "49152:xiZfKgH5cQYbcl5m7Kn/B79WR//c9xI58XsASwVpQkLKqRf9KbvlLekEJ:xwz5lq7Kn/Vs4IglFLRR1KblC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787579093, "uuid": "c2f1e367-bb8d-4511-979d-c4e2d361bd36", "value": 2980864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579093, "uuid": "dd7aacfa-63df-4965-9d89-13b65945aacf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd196508-9fc1-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787579094, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787579094, "uuid": "b52d03d7-96b9-4754-8538-3b8008b5bb9f", "comment": "Malware payload (Mirai)", "value": "ec5269a5a2e52468e3b6fd6edeb3a539", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787579094, "uuid": "c43ebdc3-0461-4580-81fd-2a63dbe2c4ef", "comment": "Malware payload (Mirai)", "value": "eb05c12761cf7d2da32e0d6c1079e41f4239c94300d87e39c678bd345dc25b22", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579094, "uuid": "83b41296-d46f-44d5-9d21-136c78b51e34", "value": "T16623023D4243A950D765C83FFF9A0AD15553DA2963EE702779BD009964CC883E8AAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579094, "uuid": "5b567f00-18ca-4ec4-85b3-21e5be93ee0e", "value": "1536:soUrbpI9Faqm52bid8x8bfnPxWypX8z8azS:s9S4bUwfnPVeTm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787579094, "uuid": "ec16bcd8-5fed-45f0-8de5-e246416ad61d", "value": 50096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579094, "uuid": "f745f6b5-6c3b-4fde-98c3-492e1df63874", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31fcd45d-9fc2-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787579183, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787579183, "uuid": "75e8c491-619a-4d7b-8243-54e180e2f681", "comment": "Malware payload (Mirai)", "value": "5aad226f9fca1187374bb8f4e53b99a1", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787579183, "uuid": "93278b6b-8d0d-4799-9923-a8147cdeebde", "comment": "Malware payload (Mirai)", "value": "06c0d953a56629d869230c7962836b020e0977e8086c1fbfb7e6470a6047dbc0", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579183, "uuid": "5647fe45-9029-4ed9-b403-e62b09f0f52b", "value": "T139430205CB33A470D191D531FE570A63E7EF2EA489DA70CC0DB48F0D8FA269891E68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579183, "uuid": "d5fe07d8-734c-4755-a2ad-b18d8ee1f657", "value": "1536:dfYo8m3wN0aTa8B8+yUuCx0qX5ay508tKOAL+6:RYbNb8+yLCx0o5JtnAL+6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787579183, "uuid": "cdec4826-8dfd-4498-bc8f-02e9267f5fe3", "value": 55772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579183, "uuid": "1500f8f3-be53-4b91-ac58-7fb9fda9a879", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c951d78-9fc2-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787579362, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787579362, "uuid": "1e4bf666-8b7b-40f3-9283-2bbb21bb702c", "comment": "Malware payload", "value": "d8467efa503fb8dcce8438bb0f023f4d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787579362, "uuid": "8eae22af-e958-48ac-a02a-4fd8c7272f49", "comment": "Malware payload", "value": "de07b3ade90c49e290dd4394a2413a77e82f359b4c0a060a6dd7c24590e9a9a1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579362, "uuid": "d1b38de7-9d04-412b-b1e8-87b4717b5bb9", "value": "T15BB187234829AC721157C6B4B146772DC0EA8277F342C65A72FD815C9FD3DC281E37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579362, "uuid": "c131b334-4742-4a2d-8f62-b5abeba06ae3", "value": "96:MJlH7n472wO36VvLb9NE0kNUmgHwrSUx9PGjq/GNt7sGjExml51pOT1pV8Q3O3NZ:MvH7n472wa6VvLb79GUm3H9PDGNt7sm1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787579362, "uuid": "71e3de1e-f3ae-4e42-98d5-254abec6c15a", "value": 5413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579362, "uuid": "1a2f638a-ad86-4691-b99c-f33dc46bb8b5", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35569135-9fc3-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787579618, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787579618, "uuid": "c323f031-3271-4379-9a12-b7c00bedf0ca", "comment": "Malware payload (Mirai)", "value": "0e4a12cfa4dee7692b0d16a9eeb21df9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787579618, "uuid": "9581335c-fcb3-42ca-aa96-2a37f9c9db59", "comment": "Malware payload (Mirai)", "value": "eecaadd5291b82dfc41ecc4aa3a8c8664c76da196ca587a15087846a498b6498", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579618, "uuid": "998acd09-7a2c-4f48-aa3a-712747a457e0", "value": "T132E36BC069E3E0B1E653497A473B931A5B32D4370219DA11F72E69387F42150E7BBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579618, "uuid": "223b7ec4-1fd3-48a6-b6fd-b4f73a0e0711", "value": "3072:62tChvbh9YDgS6t88jwf2YE7t4y89XbAzLu1EssMZc/T03ImIys61X1h5om:hChznqL6HbEAzQEssMOgh5om", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787579618, "uuid": "0c6ca558-9b7f-4d8c-aebd-db9f340331d1", "value": 148136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579618, "uuid": "1e20b41f-6a32-4d6f-8cf2-8fcac7bcdd2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6ebb4df-9fc3-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787579809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787579809, "uuid": "6a2592b5-71a9-48c9-b07d-6d487debc889", "comment": "Malware payload", "value": "c6a5e0433d5412ad307d8a37a45be264", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787579809, "uuid": "11c1ca5d-9a9a-4db8-9905-176341cef051", "comment": "Malware payload", "value": "ebf722e935528d5c982b2977f247d66364f43735255b2a69e8d53f633f43246e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579809, "uuid": "c751fcec-90b8-4719-a761-2dfca038de29", "value": "T1CC63F97378C6142A311F028F6107732CB5BA99D6DA01D9F1F6F661285BB4FA136F32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579809, "uuid": "2d69aa89-8bcd-40c5-b24d-eb8c74bd2b20", "value": "768:uNZdypGVU1pupU0nMF/FbD3tKAD27p+EeLSJb9ee7xgqapPWuo0sCy:uFyp4UKMpxD3tKAD2VDeLSJbngqapPW/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787579809, "uuid": "a3341de8-8881-4798-9bcb-e331ae1d509b", "value": 70350, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787579809, "uuid": "3a740f0a-2a87-4292-a87e-5f8ecfa7c49d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29395fac-9fc4-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787580027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580027, "uuid": "1bea0f27-abae-45c8-bbd4-6aa3d0b96781", "comment": "Malware payload", "value": "ce9fa7467362ea1adf08bfc3eddc1bd6", "object_relation": "md5", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580027, "uuid": "55db4811-d156-4a25-ad5d-47f5b3637cd9", "comment": "Malware payload", "value": "b253cad8bb709ecc99eb053e81b1ed3212e095356deb2177d30b0dd5be75f3e3", "object_relation": "sha256", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580027, "uuid": "eec6cc36-8202-4ec3-8f3b-4511e63a0272", "value": "T133D523997DF31674DC36C379CE82E4BEB22A33094AA54E573ACC1D004E23A445E767", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580027, "uuid": "64fa2d20-0dcf-43f2-b07b-46ecff8d843f", "value": "fe230628262faec735b6f015758b7519", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580027, "uuid": "26e67b16-6d4a-41e7-aeac-163eca673c39", "value": "49152:zmG1yHk8LSHxScEX42xi8qCLMo0WWhrJgWv2lC9bq2/gIEfMLMNUnQWTv:zt1+VsUcEo2xhqCwoTWhrJgWEC42/ZEd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787580027, "uuid": "b6ba33e0-98b3-486d-b0ac-14c8025c548b", "value": 2982400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580027, "uuid": "8b4109f5-eeb9-4b56-9dbe-32a0576dbea4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81d036f3-9fc4-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787580176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580176, "uuid": "51ddfbd0-a2d7-4b49-9bd2-ebc9c76b64b7", "comment": "Malware payload (Mirai)", "value": "a50ddba8c18650ca7da13546fe0440a3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580176, "uuid": "aa89b5b7-3bc9-4e6a-b2d7-9a7c0dfe85bd", "comment": "Malware payload (Mirai)", "value": "18c1502de9ebf3b8fb22c4fb532ae2887a18b3694e0107ef5a042f6055e2d0c1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580176, "uuid": "930c8b5e-60cf-4946-b73c-75f5eddb9ef6", "value": "T1ED13D716EE791B2BC1D0733718D78921E9B253E526A8964F7FB31C599E44220323FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580176, "uuid": "8674fc09-5637-4af6-9dc1-fb946ff3e966", "value": "768:8Q+I8O7s6tH2V3OU0LnEV6JnxYyzNabHTPtW1eEK:8QB89+2UU0LE8JnewabHTP41eEK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787580176, "uuid": "0943dd19-c8d6-4ea2-85da-f0c1ee353649", "value": 44384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580176, "uuid": "b012cb90-551a-4a9d-93e2-8f3bba7bb498", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c300dfcf-9fc4-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787580285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580285, "uuid": "5ac6cbff-88e1-4b96-8c09-45c3a26ab709", "comment": "Malware payload", "value": "55f87fbbc431156ec0a63d5e311d537f", "object_relation": "md5", "Tag": [ { "name": "shortloader", "colour": "#200f54", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580285, "uuid": "211e532f-0930-4897-970c-8cd3d7fe2b75", "comment": "Malware payload", "value": "92611aaa3b5e62d60323c4fe58658c897e2b0f3826e323f61253563800e5c3d0", "object_relation": "sha256", "Tag": [ { "name": "shortloader", "colour": "#200f54", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580285, "uuid": "d98ae201-513b-4ea7-a175-a36f437b0359", "value": "T1AF6533562518076ADD9B0BB7B8F64127A4FF62C2172420BBE7E7FC79C02174A5421E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580285, "uuid": "d8fc4b85-c5ee-4b10-adba-db1893c05704", "value": "7fa974366048f9c551ef45714595665e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580285, "uuid": "782a1b43-b13c-4532-99bd-7314410a6860", "value": "24576:ncFw6i0y7oegNZiuHqKcX8nHya78EqULN0i0gQufXF8wZ0XyjKGkVbZWqaXS3YQ4:ncFw6byC7PnHr8fULWbcXaK0CjbkjWfF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787580285, "uuid": "2c4fdae3-1bbc-4f83-8e92-519fba8905ee", "value": 1479904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580285, "uuid": "f3a26eea-f2d1-41ef-bb45-d94f15684520", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d00e47b4-9fc4-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787580307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580307, "uuid": "67ca2399-9ee2-4bdd-adc4-fb0d9ae9125c", "comment": "Malware payload (Mirai)", "value": "5aa4408c4eab8ce6bc092a35c6e533d8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580307, "uuid": "cf03ce8a-e6a4-4b71-84c0-abf70be7da83", "comment": "Malware payload (Mirai)", "value": "a8475accf7afb3b9dbed6b81fd941842f8e5c158b7db1cea9fd6875518d2ec56", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580307, "uuid": "b8d308f2-69e0-46bf-84a9-735e70277717", "value": "T1FA143855BCA29A12C6C3467BFB4F414D372A639AD2DD7103BC1E6F203F8A45B4A7B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580307, "uuid": "4867e5b3-9e98-4689-a92a-b0fa1152b3e0", "value": "3072:ho6H4g5tzB265xNNiA7s9dUEtu4KSMVsLqD/hLPFiOuu1EssMZc/T03ImIys61XU:h1Yg5tzB265xjiA2d7c4KbVsQhbFiOzw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787580307, "uuid": "821922fe-3e13-49db-9d47-249d4f2f5d30", "value": 195276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580307, "uuid": "21489c21-69cd-4796-90bb-8f887f9b3160", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ad0a429-9fc5-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787580567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580567, "uuid": "c77a4707-7bd0-4b89-afe8-3fbc6bdce762", "comment": "Malware payload (Mirai)", "value": "5555045aa29ae70c798e26ee9e7faa03", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580567, "uuid": "0fe62674-08c7-4200-83f7-b3f669d2faf7", "comment": "Malware payload (Mirai)", "value": "f6ad4d0dfad475a63f4ea9fadcf44b97aaa38382585abd0bfb2f1ce186e9026b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580567, "uuid": "5d7c41e5-422f-47c0-a8bc-5723f354d0a6", "value": "T1AB934B2119F3A112D6D3A43F47DF421AF16269070188C61BBC3E9D6E7F422A077BB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580567, "uuid": "73186c2d-f123-45ca-b7dc-1ff1af1ffbbe", "value": "1536:kjbEs6v7qxvNRJhF/TbTuMVlxnLLlv9QLaW2Tu1EssMZcywT03ImIys61XKNAh56:kYG9/XTPPLLiaWUu1EssMZc/T03ImIyk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787580567, "uuid": "8d8aa95f-4712-44c4-bb1c-cf77e969a8a3", "value": 92584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580567, "uuid": "4b782285-2716-48d9-84a3-d143e67f2f9d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "785adaac-9fc5-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787580590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580590, "uuid": "d705d50d-87dd-405d-8f0a-059df7686652", "comment": "Malware payload (Mirai)", "value": "c052f989ae5f727428840690e64b28c0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580590, "uuid": "9a3b7c9d-abde-43af-ad51-8f239f600208", "comment": "Malware payload (Mirai)", "value": "5288325864a0e7e0f95a8448cace4128a3b480b331838ff0e1c88f404a2fc425", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580590, "uuid": "f65b0746-f25c-4ca1-aa55-68544de86a8d", "value": "T159144A02776D0403D3632DB43B3B17D1939FE49321A4F604790FAA999FB2932A696D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580590, "uuid": "41c3ce1f-a463-4a90-b80c-35a22a33ea34", "value": "3072:H3yrJxcAH1QNTxudVyMnVTh61s7u1EssMZc/T03ImIys61X1h5oN7:HirLJH1QJxIVlnVFSsAEssMOgh5oN7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787580590, "uuid": "90a6bec3-b824-42d6-a45a-47acf50e516b", "value": 191288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580590, "uuid": "138e8a43-c041-4fe4-88bc-ffd7f72be9c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f156449c-9fc5-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787580793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580793, "uuid": "f7d5d7d1-4ff9-430d-9466-b4a546ad34a8", "comment": "Malware payload (Mirai)", "value": "0e2248425277899c2db00859f46ab5b6", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580793, "uuid": "b5f85a8f-29f5-4f5b-8c35-6d4dc8c4588f", "comment": "Malware payload (Mirai)", "value": "29fb2896608e2b8250ae782a68c1c10e0fc02b2e312da5a603cd8d491f4d0f89", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580793, "uuid": "4542eab2-bb0c-4018-80cf-f064b1351d1a", "value": "T17603F164AB66CD56E2D13A72A9761DC63DF325B4C39F70631198CD8CA0A6FF0382D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580793, "uuid": "c0c3a155-c702-42c6-bb6d-c9514b2b351f", "value": "768:wuDagzEQ8rpQIT/qvsPUnUBkdEGXL2DDWsRIc4bkT7kD6bIl9q3UELd:lDagGmQSwUU+WGiDDWmIk7k+bI4Ld", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787580793, "uuid": "f489592a-d4e5-40f5-b65a-869dd0bcc76a", "value": 40372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580793, "uuid": "26e5527d-090e-4dac-bc4f-8b419a1936ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1a6360c-9fc6-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787581088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787581088, "uuid": "3eaca0dd-fda1-4351-bd2a-eb7cadd768b5", "comment": "Malware payload (Mirai)", "value": "99ef6817e5a7ce060512cbaf18452206", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787581088, "uuid": "d4f2d27e-56cd-4ba1-b8fe-a1b0da04868c", "comment": "Malware payload (Mirai)", "value": "9ed802164ad6e3782665fbd4e127c056568928988d94e370c6666c052bc2ed93", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787581088, "uuid": "7ab01893-f983-4e51-8856-1f3614af99b4", "value": "T1B29308917CF3A156C6C3863FEB4F920A3322619782CD7522FD1D4B642FCA11A87B79", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787581088, "uuid": "860ffa0f-ff95-40b9-951a-0af1dc77d44b", "value": "1536:+6zvz8oPV7e/f4Doeu2Xy3c31ZpjUwrIFHU1HkFHpdQTu1EssMZcywT03ImIys6o:+yhPV735Xy3c31ZpjUwrIF0FkVP2u1EL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787581088, "uuid": "5d98d2ad-020f-43cc-863d-d32f65453e24", "value": 96624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787581088, "uuid": "f79673d4-ae79-458c-89a9-b559be654e41", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4afb9f60-9fc7-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787581373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787581373, "uuid": "6f084068-88e1-45db-9a74-c569dd1e5a6d", "comment": "Malware payload (Mirai)", "value": "035c2e1e3046c87ca2f3e824897592ce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787581373, "uuid": "85f2efd3-9176-40ee-8ebb-530141be8a3c", "comment": "Malware payload (Mirai)", "value": "95f5156abcddb7fba0f4adb0915769fbad23256ac6344c791f10fdf08a1057ba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787581373, "uuid": "39819b48-6538-4e36-b0bb-c5a9702ed8ae", "value": "T1CB43F2994B281CE8E1B645BA1F714F5A2FB20DB0E1F0EC42F5A3D99BD5820B034675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787581373, "uuid": "e48817a1-8634-497d-9f7d-57be3d23e03d", "value": "768:DkF5caqiQWpLSgKpmMFW68ewv4BRIlpDRZCDOI2N78eojN8KHSlRAw3rcJgGlzDt:DkrzxltmB8eM4BRspdwDyNweKjwAVJus", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787581373, "uuid": "b77d521d-282b-412c-b5f0-7f67984b72a4", "value": 55648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787581373, "uuid": "8f32104d-8fde-4dc0-b59d-c1bd79c587d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3710f3dc-9fc8-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787581769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787581769, "uuid": "3c8470f6-29e0-4748-8a17-937997b92585", "comment": "Malware payload (Mirai)", "value": "e75d713458a4eab3c9b2336b825c37ac", "object_relation": "md5", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787581769, "uuid": "d7d42e18-dbd7-4040-a31e-32b632ca51ed", "comment": "Malware payload (Mirai)", "value": "2fa86f74d22e3a1cd5db46b8528030b5660f3386f0ae9807a921273092db3ace", "object_relation": "sha256", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787581769, "uuid": "83f453fb-ccd5-4d6d-9157-a2dd638911df", "value": "T129B39C9BF24745A0C88246F047DB9F9E3E2363C05F4B98FB3D2D4A3999710DB4A15B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787581769, "uuid": "99d687e8-d40d-4d88-8016-fd53f3f5060a", "value": "1536:SdQHDSXnP4qBuQTHDyhjUo/Q6NQAgdT/LWW:aeOXQouQTjgjZQ6GAgJq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787581769, "uuid": "7f0ca3a7-363c-4560-81b4-b4c36c4754f3", "value": 107824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787581769, "uuid": "ee7cf91a-0256-43f1-86e7-7b7776c073e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f1c07be-9fc8-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787581916, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787581916, "uuid": "1fa2fb73-6ed7-443d-bdc9-0baa915afdbf", "comment": "Malware payload (Mirai)", "value": "e6fa7da28a3aa53837b32f3d3761e3d8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787581916, "uuid": "50bc535b-2135-4b0a-8281-60d9eeb72cea", "comment": "Malware payload (Mirai)", "value": "c61d0e71d8984a4b759a7e04408826a1a85db1e79b28f8f955bcaccc93d465c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787581916, "uuid": "b585a040-1317-4b0c-add2-c8660eed9278", "value": "T1B7244C52AAD24A13C1D3177AFBDF41063323E65693CB7306F92CABB43F8625A4E635", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787581916, "uuid": "3cce8b56-4959-4159-81ff-262b3cc155f1", "value": "6144:A3xAoL4VpAnUsd2g0OPjF3TEanVsChKjFZOgEssMOgh5oQ3b2ZM/9/B:iAoL4VpAnUsYg0OPh3TEanVsChCEssMP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787581916, "uuid": "bc61ea66-ee62-4a8e-89b4-c593bc162610", "value": 216750, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787581916, "uuid": "565de57f-71fc-4ca3-8d7d-4cd86b2256b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "759969de-9fc9-11f1-8686-82aee05be84a", "comment": "Malware payload (Phorphiex)", "timestamp": 1787582303, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787582303, "uuid": "f2774cce-269e-44c8-b67c-850fb86e8511", "comment": "Malware payload (Phorphiex)", "value": "9f1919b367486f4028437ccb323ba539", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "Phorphiex", "colour": "#a44345", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787582303, "uuid": "1f5e0996-f6eb-4d04-9fd5-300af88c2243", "comment": "Malware payload (Phorphiex)", "value": "ed431c5a762490d667792f40f99766bd1cca355663766332e181ed5396d67def", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "Phorphiex", "colour": "#a44345", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787582303, "uuid": "47b71ed5-5879-4943-8137-49424f4fceff", "value": "T104824B0FB9424326D0E11070A676867BDA79A8B633C414DBF7E48AED0A6C6D1FC321", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787582303, "uuid": "d9039407-6a47-43eb-a7dd-16fd8140b6d1", "value": "edd9caae8565fbe43a73e0ad530f325e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787582303, "uuid": "141b67bd-cc99-4957-bc89-8c76fed443cf", "value": "384:HR6I8vVaF6OeYUQQlmLu94gXTczlmxav8U9cm7l:HRPvUQQt9U8a0Up", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787582303, "uuid": "5f7877a1-eef9-47a8-8032-2b18891d6906", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787582303, "uuid": "1d97ebf3-a9f8-4dd1-baaf-60b3aa229fbc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb448a6a-9fc9-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787582500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787582500, "uuid": "a3402a4d-8447-47f1-9c7b-8433d7042dc4", "comment": "Malware payload (Mirai)", "value": "09c9ba08d8640c026d76bf6ca0968411", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787582500, "uuid": "f6a0fe9a-f964-4676-bb28-ae6318260a00", "comment": "Malware payload (Mirai)", "value": "6210a1c6ff3c633555c8578b34caf5df58462fdfc65226b75ac2a0773e682a2b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787582500, "uuid": "1a476e59-61dc-40ed-a86d-75585335a42e", "value": "T133430224F0B55A9BC9BD043C939D6B72C50870C833DFBF9C62714F886B38496749A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787582500, "uuid": "06a34731-fe80-49ad-a33f-ac5e745d9a4c", "value": "1536:UEiMsmKiIlLUX3Flnw5ATv4bTlKQnnho4xGxZ:UEiYjmUXVlnw5ovupKQnnQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787582500, "uuid": "bebff5ee-f2ff-4466-8291-25d1611d848f", "value": 57456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787582500, "uuid": "0f279709-8d0c-4360-be01-95fdf259c713", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2858feaf-9fca-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787582603, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787582603, "uuid": "fd2925c2-86da-481c-80b4-b5a8f7e3cf8d", "comment": "Malware payload (Mirai)", "value": "aafb590f5ea6a1bab7afa928054096ac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787582603, "uuid": "065bcd9d-f51c-4ab7-be02-4914d5d91419", "comment": "Malware payload (Mirai)", "value": "e216b69e4e2e4faebaee321cb343e17dbf2b62449b072d66ac557ba2a88199a6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787582603, "uuid": "22089bd1-8742-4a64-b926-a25190b466cf", "value": "T1FFE318DBF800DDBAF40AE336485709057130B7E119826B377257397BED3A1A92467F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787582603, "uuid": "400c93c9-6be5-4763-8bac-0ade85ad3e03", "value": "3072:oNNd9AYfg+tlqHAq6R+LrUNFhs4nMsPE+oaqVHjbimL2sgwyAykS:KJAYfgClqgq4G2FhssMw9oaIL2MyAvS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787582603, "uuid": "2d1c5507-f023-4d77-b825-0351ae65b528", "value": 156608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787582603, "uuid": "acbe3d8b-a774-4bac-bc7c-196a926425a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "704bd575-9fca-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787582724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787582724, "uuid": "74d91f21-935e-479d-bac7-f91fc5a901f1", "comment": "Malware payload", "value": "c6def66141e35562d1ed3e54f4e332a8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787582724, "uuid": "9c0fe839-07da-4c12-b6fa-81270965e6b7", "comment": "Malware payload", "value": "d4b88ea7bb3675e6f527fb21edb51df7d8cf96700e8f8acf8c6ad297dd0455ad", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787582724, "uuid": "be597dcc-1505-4f7d-abfa-e54eae23522c", "value": "T130C18576A804CD4BDC61BE89003EBE3B54CD857B56A5CD7CAADCCE1506125BE2F91D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787582724, "uuid": "248ddd10-bd31-4204-a770-56b8dfa32bec", "value": "96:ERy0MPOaYosLvnK0ggiBcL9tc/2LgBu7cg1xqzcfxmbcfEWtacTKEoouW:b0UORomnvO2OgnqzcJmQXmoD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787582724, "uuid": "6ddfb14d-0d7b-40a8-9091-130cd9e0bcc2", "value": 5898, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787582724, "uuid": "18de59b5-ecc7-408a-8a93-ee3681286af6", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91e39238-9fca-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787582780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787582780, "uuid": "fb111a9a-583e-43e8-ad2b-e7cd8f807547", "comment": "Malware payload (Mirai)", "value": "29e995e1a99a814a11e803218cf11459", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787582780, "uuid": "59df66d7-390b-4572-a4dc-8e7dd23bd088", "comment": "Malware payload (Mirai)", "value": "576b03f431de4fa667b4276d95c95de2ad99d544433d8fc3aefc22dda735ff98", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787582780, "uuid": "03ea4a1d-0cdb-4771-87ea-8485422b46af", "value": "T16934D8096FB20EFBD86BDD3B06E91A06248C641722957B35763CD528BF0A54F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787582780, "uuid": "6b87f423-6773-4667-9f88-1b391739815f", "value": "3072:eDM4HYHWgRqJ5gk6K8u34232HexNCsHFJOdH3n8LBu1EssMZc/T03ImIys61X1hc:ku0j8u34ESkhHSJ8LKEssMOgh5oOS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787582780, "uuid": "b24eb60e-00f8-49ef-a48b-55a9556a8329", "value": 251812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787582780, "uuid": "8dc07b3b-1a3a-4ce1-85cf-2588da1d92ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34ff2913-9fcd-11f1-8686-82aee05be84a", "comment": "Malware payload (Phorphiex)", "timestamp": 1787583913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787583913, "uuid": "66d77eeb-c06e-408a-a493-9631b3cd482d", "comment": "Malware payload (Phorphiex)", "value": "a3496c7444db218caa294632b658931d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "Phorphiex", "colour": "#a44345", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787583913, "uuid": "241da779-ad7b-48ab-8794-0c95e38d2c4e", "comment": "Malware payload (Phorphiex)", "value": "250b1960593c2f18862ab5579c4830c26edec0a7b3238cf76db83337723cc431", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "Phorphiex", "colour": "#a44345", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787583913, "uuid": "9be03ac0-69db-40ce-b743-88104f2ec6e2", "value": "T15E824B0FB9424326D0E11070A676867BDA79A8B637C414DBF7E48AED0A6C6D1FC321", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787583913, "uuid": "1a32b481-4f2e-455f-b61b-7d90bd8fca3f", "value": "edd9caae8565fbe43a73e0ad530f325e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787583913, "uuid": "d77e6608-169f-4f5f-9f5b-f7289d61133c", "value": "384:X26I8vVaF6OeYUQQlmLu94gXTczlmxav8U9cEl:X2PvUQQt9U8a0U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787583913, "uuid": "4eb08670-d222-4a3c-8eef-882f6f49e1ea", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787583913, "uuid": "3eebd390-b921-44b5-a11e-00f80fcb0a08", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42217cc6-9fcd-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787583935, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787583935, "uuid": "0c923ccb-6b96-4741-a8ae-454857d54853", "comment": "Malware payload (Mirai)", "value": "47d6a4409eff807da564bfd6a1c2b4f6", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787583935, "uuid": "8596ae15-f991-4796-95ab-2a1f72665bde", "comment": "Malware payload (Mirai)", "value": "dc03e8e7f1208c7593d6411c5e10e50bbae1c761faec519c903fa6b179c19688", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787583935, "uuid": "a7e0af05-6b36-41a6-9630-433d9bb44abc", "value": "T154B3120883CE2916D411D8B71D1DD3B797BE5FD76A508BF3B844DA0438335CAB54A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787583935, "uuid": "2835df86-9b04-4324-9933-179014f663cb", "value": "3072:bVC5wBfQA049W0Nn0Wcna9A+Avd4u+qgwi:bVC5OfQun0MR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787583935, "uuid": "d429b893-5522-4d1a-a2ee-b19eb19c20e4", "value": 111524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787583935, "uuid": "6a6d03d8-f746-48aa-91c7-1a206f6f7242", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bda85eb-9fcd-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787584085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787584085, "uuid": "e70e12ea-08b6-4055-a442-2b4334a42e6f", "comment": "Malware payload (Mirai)", "value": "40dfc14f402a06281e14c38fc927ff74", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787584085, "uuid": "de08b847-42ec-480f-b67e-cd1f14713c1f", "comment": "Malware payload (Mirai)", "value": "8421a7f0fe6396845762246f5cc19a7c1a7124ff80d5aaeac69cd91b0fc815cf", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787584085, "uuid": "5ee2fabc-6ed5-4c7a-8d6b-86ddaa2df6a5", "value": "T16124AEC1721C7EDFE1832D7D860955235C0CAE12E8039B9261FD6A47DA7BAE30FB99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787584085, "uuid": "2ece95ff-1599-41f3-8ef0-7c1d5c8c1f7e", "value": "6144:uCWEwesWl+cJvAC3uVfAlVZ/kYVdaBCUvFFlJXsPH:qreLAemYPlajFGPH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787584085, "uuid": "d57929a8-2e31-4298-b01e-40ad7afaa0a0", "value": 216236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787584085, "uuid": "1134b0bf-898c-435f-b770-8985d92d1169", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c17519de-9fcd-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787584148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787584148, "uuid": "efe33c3a-edec-4b12-a342-5ba83fcfaf30", "comment": "Malware payload (Mirai)", "value": "b5469bd7f08ce3b86e2340aa7a9a9b41", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787584148, "uuid": "f8ef4f31-7b7c-463a-a595-009012c3b8b7", "comment": "Malware payload (Mirai)", "value": "a0b75119400607673c69a70f9ced1a9b459b2cec49c3985a9143ebb64c3553dc", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787584148, "uuid": "eae08916-6457-4224-ac7e-13445a2b1c40", "value": "T15F8302A0E05E72DAC9219438D40EC501B9A1E560B7F6F79334885B65EDF12CA1F3E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787584148, "uuid": "55558047-d973-4470-b1cb-4f71618842ba", "value": "1536:0Sb722VO7LBcrtiZcubVMou336LyfjkhFIWbtv72upfZ:0E722VsButiZFUjLkhaWbNR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787584148, "uuid": "10c52623-b7d6-4d36-88af-88433d7df2ae", "value": 88400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787584148, "uuid": "d705e4d0-460c-4e14-8bcd-9d216fe5accc", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9797c261-9fce-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787584508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787584508, "uuid": "09dfbe66-aef9-435c-95e1-c26f057da062", "comment": "Malware payload", "value": "02b23c8804d369250cd92ed56137456e", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787584508, "uuid": "2ce316ae-8a8d-4c4f-880a-342fb22195c9", "comment": "Malware payload", "value": "db87ba832b8b6669bb148a0137cdc09ae0a6134d0c2dea9807e670713f487ae1", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787584508, "uuid": "3b73063c-0076-4559-8a4e-28101ba47266", "value": "T18C04DF70B062BDEBD54145BB1038E47402419D701B6366A5F59EF3EECBA26E13ECD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787584508, "uuid": "ada7aeab-ed3b-4a0c-a234-5cfe5556ed28", "value": "3072:mjmPoKChIJrtygAaZgx/mUIsIi074XF03PZaiW5rOGltBA1De1:LgKbJrtvZUT1CZaigBmC1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787584508, "uuid": "ed77e831-d590-4b20-92cf-da53d57a68f8", "value": 188851, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787584508, "uuid": "004a1ac1-87f2-4ce9-a2e9-fcb7b37695e3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa612796-9fce-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787584673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787584673, "uuid": "8ba270b1-533c-40ff-802e-f4eb70b78d54", "comment": "Malware payload (Mirai)", "value": "60f9effabcc1878d60f1cf28c410804b", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787584673, "uuid": "3082ebd1-c93e-4921-9b36-8ae5f5dbe19b", "comment": "Malware payload (Mirai)", "value": "8a8ec0af1638935637d17fdfc0d3ac48ab2cd59dbb385e24afc7e32e0fc49b0d", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787584673, "uuid": "d442162e-ac31-486a-9559-232d5f276271", "value": "T198D3121DFC7087BCF2725AB07B136A364033CB6E9EBA0F775A6457B85982495CD108", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787584673, "uuid": "32310c82-7e09-4f2f-ad48-14948e8bc691", "value": "3072:8HawOSO2uMoKGNZcIGHtWZBfRENBxmls86IKEgy0RomNz0P:8qnVMothGODE4+2sW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787584673, "uuid": "0dceac22-0c01-4320-9e48-7c905efd9a41", "value": 140004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787584673, "uuid": "9c3ffffb-0465-4bcd-8b5b-228658e231d8", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cabe778-9fcf-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787584758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787584758, "uuid": "18bcfbd7-6b20-48e8-88af-1f3b9add9056", "comment": "Malware payload (Mirai)", "value": "f76eee42abae57d03c92a51b3118fddc", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787584758, "uuid": "b62035bf-975b-4868-888c-228acc11983e", "comment": "Malware payload (Mirai)", "value": "5a059ee0af217e3afdd1e6666e5f77d0f7e843e5c2581db86417a70a7e6c2b75", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787584758, "uuid": "adf77979-a1d9-440c-b946-96a355d301be", "value": "T150830194D4A973D9C52098B8C40FD501BD62A428F7B6F64324882729FEF27D61B7E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787584758, "uuid": "624b4cd7-7055-4a6c-91f7-5cfefabbd817", "value": "1536:0Sb722VO7LBcrtiZcubVMou336LyfjkhFIWbtv7FoYk3fR:0E722VsButiZFUjLkhaWbTs3J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787584758, "uuid": "2a9d6140-cdad-47a9-aa8a-6c1d56c1d3ce", "value": 88400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787584758, "uuid": "27d1581b-6f10-47c3-b4f9-86dc04fed210", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c23b03f4-9fcf-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787585009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787585009, "uuid": "9c9365af-62d7-49bf-b84b-30383ddb2d28", "comment": "Malware payload (Mirai)", "value": "4407bfea25ab93b6dadf72d0f791dd09", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787585009, "uuid": "9b9bab06-b8a0-4dd9-a049-8a92ec7e0c11", "comment": "Malware payload (Mirai)", "value": "2a54c2000244c2f1c1cbc15597c7bdf1faa4592a0b15f5954150616e5f0b8b09", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787585009, "uuid": "e6d5b1b5-24de-4032-9f5b-1dbaca7982c9", "value": "T13CD3127D2B5BDAE6C0878A7FCD29CE67B4E02E593C0D8FFCF69402194596A2505207", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787585009, "uuid": "5263d9f2-aad5-42d1-a4ab-9374d90ffcb5", "value": "3072:8NwRzIOrjSf2aljNPEAnJCoVGw4Z6r8SMK3DILp6EIU:8a5IOrjSOalBHnJCWD0ulMK3tEv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787585009, "uuid": "46d6747a-4204-406d-91bc-32b0fa92b83a", "value": 140060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787585009, "uuid": "e7755e23-f8f9-4ab8-9f9e-928a001af64f", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52c53e94-9fd0-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787585251, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787585251, "uuid": "6eba3e7a-c87d-4be8-a73d-da6f1ed5427d", "comment": "Malware payload (Mirai)", "value": "1c17dfb3b726c4429136f0197aea77a2", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787585251, "uuid": "4651f5af-0c66-4c40-b3dc-4fb6c61f1bc3", "comment": "Malware payload (Mirai)", "value": "de1e368d7350622484b986abd7e4a515285e88411954e744d005bebc5a1929d5", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787585251, "uuid": "bbb57bb9-6172-4545-8340-d8381d4aa6ce", "value": "T17B93024A7207712BF160ED761B7CCA49FE18AC480BD31B2514B8727AC9516CDA733D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787585251, "uuid": "758fbb28-c55d-498b-81ee-5a2dcdced293", "value": "1536:wMPUixK4UmWy8WofLQBIEg/7sxuq9TB/QrHB4bWD5MCNx1DDBs3MKf9:wMsCXUa/vwgA8B/QrHy63xDs3MG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787585251, "uuid": "05d26055-6301-4ea1-8736-287c95747fac", "value": 95420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787585251, "uuid": "1988fc67-8077-4083-9925-d19b7d4a2348", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "829b7dbc-9fd0-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787585331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787585331, "uuid": "dbf41fdf-176d-49b1-9371-24afd670b234", "comment": "Malware payload (Mirai)", "value": "4ad8cdeb3640f79e61fb9adf02fe474b", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787585331, "uuid": "790e981d-db88-4ebd-8df9-22b739f8c2f6", "comment": "Malware payload (Mirai)", "value": "5fd33f140fd5693ca292aa8c934722b08de01b3bafd4904579a2cb0deedac8d0", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787585331, "uuid": "29c04b0a-2c05-44ad-b03b-0b610a61a92b", "value": "T187931205ADF7F449D79E383B1C97BD2058C8DF4147AA7BB2272980B6D09C7AD811DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787585331, "uuid": "5d60a172-16af-449e-97cf-e6ab8c2dde5e", "value": "1536:DoPhAoPCPNIJAj94Qc3U5tVUQMXcdP3ltdjylhkJLhpIm7oD3PqjLAa3t98tKY+A:DuAo0NATUzVUQeGPTFylhm/7cM0Pt7NJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787585331, "uuid": "495feeb8-2323-4bec-a3b4-2ffaa3500251", "value": 97292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787585331, "uuid": "a78d41a7-51be-4d68-8876-5c083af2b7be", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d163a366-9fd0-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787585464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787585464, "uuid": "48ebf0fa-56ca-4e57-be26-cd89565aa2db", "comment": "Malware payload (Mirai)", "value": "af3bd30bf8e41ab18024d8b217363773", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787585464, "uuid": "25e85010-6681-4ddf-ba8c-abf7098ff455", "comment": "Malware payload (Mirai)", "value": "a2901d935af19fc75533750e8948dc291b57fa4dbbc62ee7917823320ac927e2", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787585464, "uuid": "d66d1aee-3add-45e9-adc4-ce6007b2f17a", "value": "T17DB312AD37478C66FF5C4672A5104BC01A71CF6BB20392FB283AD592A773B81252F0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787585464, "uuid": "ecba3678-abad-4acc-be4a-09906d551265", "value": "3072:HE0S2EhExtdWNOuuQ8vNnrc+5OeEM6fTkhpFHnFAqAUV1sq:k0S2EhExtdWNcQiNnrc+Pv6b6RFZl1sq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787585464, "uuid": "c7691979-9b98-4d17-b380-3fe2243834fa", "value": 117396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787585464, "uuid": "6177776b-608a-40c7-96a9-596c2f9935c7", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6caf1a6-9fd1-11f1-8686-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1787585848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787585848, "uuid": "3992141f-b36f-41a5-938b-f43ef763f3e4", "comment": "Malware payload (Phorpiex)", "value": "0bd71ac304fe9cb9d97df31b5988f5e6", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "Phorphiex", "colour": "#a44345", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787585848, "uuid": "f3cd9f7a-8cb1-43f4-aa67-1c43aac69d9f", "comment": "Malware payload (Phorpiex)", "value": "d90d1bd6eb379fa5e2e910be754d95c5f395e804bd00799f5fcf74e02eeff972", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "Phorphiex", "colour": "#a44345", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787585848, "uuid": "e40780cb-ecb3-4bec-ad7e-4f74485b0a9a", "value": "T152824B0FB9424326D0E11070A676867BDA79A8B637C414DBF7E48AED0A6C6D1FC321", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787585848, "uuid": "5cf30516-f288-4621-979d-a80f7c6f71b6", "value": "edd9caae8565fbe43a73e0ad530f325e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787585848, "uuid": "5c48baae-6207-434d-b76d-cfe7310807e1", "value": "384:+I6I8vVaF6OeYUQQlmLu94gXTczlmxav8U9cyl:+IPvUQQt9U8a0U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787585848, "uuid": "9cd2899d-048d-42fd-9e99-09e308b61247", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787585848, "uuid": "3ff062ea-1627-403c-bc41-dca629de1d06", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "516775e5-9fd2-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787586108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787586108, "uuid": "5a41a8d7-55a6-4ce2-a202-5bec7f5cb15f", "comment": "Malware payload (Mirai)", "value": "00766876dbc4efb14549f722a68794c0", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787586108, "uuid": "c384ea1a-01d6-4dcc-9008-d9bf722fe811", "comment": "Malware payload (Mirai)", "value": "4ea8e41bc05d6f5a11aec94578a2af51a0cf5f25040890a2a714fa6bc46fa965", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787586108, "uuid": "2369491a-2287-4eea-b51a-1d0ccf46b5f9", "value": "T16F830260D8AE73CDC5259838C40AD622BDA1E850B6F6F34670892725EDF12CB1F7D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787586108, "uuid": "4a97dd61-d5e4-458e-9b54-e07194ccdb98", "value": "1536:0Sb722VO7LBcrtiZcubVMou336LyfjkhFIWbtv7fUKlsafF:0E722VsButiZFUjLkhaWb5lsat", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787586108, "uuid": "af0c1f94-e26c-46f3-9694-b38e5fc75175", "value": 88400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787586108, "uuid": "e37304e3-70e6-46b3-9519-157598f07ef8", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f0862ba-9fd2-11f1-8686-82aee05be84a", "comment": "Malware payload (Phorphiex)", "timestamp": 1787586184, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787586184, "uuid": "f2cd3da5-13f8-4a21-84fe-bd13297b6f8e", "comment": "Malware payload (Phorphiex)", "value": "ed7f7dbeed08ef3446c29432ee50861a", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "Phorphiex", "colour": "#a44345", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787586184, "uuid": "81fa7b61-7d9d-4118-9516-dc5adb865c7b", "comment": "Malware payload (Phorphiex)", "value": "5e6d5240402036291aff059a205ae94c60b72e45b6faae2f3567d7e7368f5d16", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "Phorphiex", "colour": "#a44345", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787586184, "uuid": "03dabfa5-bc57-43c5-9dfd-bc4b46cdf715", "value": "T1CD824B0FB9424326D0E11070A676867BDA79A8B633C414DBF7E48AED0A686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787586184, "uuid": "60a1d170-f23d-4dc3-9b76-36deb554e794", "value": "edd9caae8565fbe43a73e0ad530f325e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787586184, "uuid": "cf7af917-ce8a-4234-8ca7-00a625b5b78d", "value": "384:ak6I8vVaF6OSYUQQlmLu94gXTczlmxav8U9crl:akPTUQQt9U8a0U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787586184, "uuid": "6133ce9e-fbb5-4a1d-9e64-489a44498f3b", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787586184, "uuid": "aa1a2918-e997-4d1c-b6c2-521c56e0a7d4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "438641d0-9fd3-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787586514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787586514, "uuid": "b99d374a-b099-4ef6-8e9d-f5684f554e57", "comment": "Malware payload (Mirai)", "value": "3efdc00ed0d2a9777a33b92b29daca66", "object_relation": "md5", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787586514, "uuid": "a7da5e07-be9a-42bb-bb34-ea4fdd54de4a", "comment": "Malware payload (Mirai)", "value": "f7e1104b45cc7ee10120174be0218abc628e780b2c598d796cd4c50f647f6322", "object_relation": "sha256", "Tag": [ { "name": "69cnc-duckdns-org", "colour": "#a340b0", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "www-69cnc-duckdns-org", "colour": "#1fdad7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787586514, "uuid": "de0a0837-9661-412e-8f6b-4d4f28b2e703", "value": "T1A48312C215405592C2B2343BD2285BE1EEA06B74BBA130B4DC17799D7DE3D2A1EBD1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787586514, "uuid": "43e59f7d-5219-4ca6-a90a-22979d1c2a8c", "value": "1536:R7JFmTfIsEgFyOOKpbUZxaD+9WhAV1sp8kcEz69QHRbIrHI0vTk6UcjrrSSD4uXk:R77kIs7EKpQie3V1saBi27I046jj58Kk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787586514, "uuid": "c4a54786-d924-4e25-a367-5863da5495d2", "value": 88104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787586514, "uuid": "26607f00-da71-42e2-b6a7-cb280d435f48", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cd42ea5-9feb-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787596945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787596945, "uuid": "2ed10a8c-f898-4878-814d-bf9bfba77ab3", "comment": "Malware payload", "value": "0f05c749e517bbfa9c76647f94d93ee4", "object_relation": "md5", "Tag": [ { "name": "139-59-240-15", "colour": "#bd0a9b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787596945, "uuid": "ba7ea3d4-c034-477f-8ff0-b6198b0d41c6", "comment": "Malware payload", "value": "3675be6c9d4f5be9d5404784c438b75baac1b4dda9886fa88ea5459b97ee4b7d", "object_relation": "sha256", "Tag": [ { "name": "139-59-240-15", "colour": "#bd0a9b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787596945, "uuid": "a45c6f32-6096-4005-98d3-47fee341280d", "value": "T14C774B43E8E61A94C4EAC1B0D166815BBBB23C5D1B7823EB1B90F3701F36BD05AB67", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787596945, "uuid": "1332c2a4-5e05-4238-ac99-6c303a30f1a7", "value": "196608:1KVBkorBGqtl8EEgcb/xxq/n+R6Pup/FIjrnoLccqRUjrwWDFMFb7els:1Ksolb8EwZ4Q+rnGtqRMwWpMb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787596945, "uuid": "939ed212-bc54-4259-9036-cb61643f149e", "value": 33960084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787596945, "uuid": "c6bdf74c-4570-4998-b299-412e870309ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e59740a-9fef-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787598504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598504, "uuid": "4d1d1d90-c1ed-4831-8f2f-6416f464c9c4", "comment": "Malware payload", "value": "0aa3079bd91ef7080e5340584995f705", "object_relation": "md5", "Tag": [ { "name": "94-154-43-89-8888", "colour": "#515afc", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598504, "uuid": "1d829a07-1f33-4a98-baa1-c5d3547cd4c5", "comment": "Malware payload", "value": "582988ffe1334f235fc20667fe67538e50f2a918994126c0fa284bfa45e62c44", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-89-8888", "colour": "#515afc", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598504, "uuid": "28cd6089-9400-4e2b-a72d-2c53bc0b3a90", "value": "T140C44A55F880DFA1C6C129B6F64D86AC33174779D2E772068A258B343BE786B0F3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598504, "uuid": "61e9eb03-e046-44cb-8047-b43f0bbc6b72", "value": "12288:GLmSyud7z3GZdqEvee14fX7coB6r+Ar6pO/cg:pHGXWJv714fX7cr+Ag", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787598504, "uuid": "604a8f08-fad4-41f1-b18b-e8b548463600", "value": 595120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598504, "uuid": "d3bdb4fc-89e5-47fe-83e6-86a8b150acc4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90f604cf-9fef-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787598670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598670, "uuid": "554097c0-6954-4e79-b120-b5e011fe092f", "comment": "Malware payload", "value": "5606d1d4f7f3a3bbb0cb0a3d21423f96", "object_relation": "md5", "Tag": [ { "name": "217-60-195-219", "colour": "#e8bfdf", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598670, "uuid": "18f549a7-9abc-45dd-b925-954e6e79d8a1", "comment": "Malware payload", "value": "60c471550e9b223efbf44106125c6e97c9132f62d6383f13c63d5a5d15962c9c", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-219", "colour": "#e8bfdf", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598670, "uuid": "2f049f6e-4b45-467a-afee-ce9beabd55bd", "value": "T16464234F89E653E056F5597CC303C1E33AC26F4728432CF725C5AD82292A59D89C7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598670, "uuid": "5fa742a0-e37b-4d02-9ff2-c0ee52c47de6", "value": "6144:zMgha8mR7+P74upcO47h1NH1P7MfQgWUBzzAs0MKAL/Kmz8R2hk52ErKAf:AAJmt+P74upcJ7nNVjvgWQIsHDKm22Et", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787598670, "uuid": "92e19820-a183-432a-b657-0144449446f0", "value": 328752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598670, "uuid": "462a9127-189b-46f0-81f7-af034b206ff0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b44bd98a-9fef-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787598729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598729, "uuid": "a64d8495-32c7-4876-b89d-9d019266fa5f", "comment": "Malware payload", "value": "1d6bf691e97bc84b9e8336a71999300c", "object_relation": "md5", "Tag": [ { "name": "217-60-195-219", "colour": "#e8bfdf", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598729, "uuid": "438937be-e94f-4300-b382-959fc2babbbb", "comment": "Malware payload", "value": "c1353b26a025f7cb9c5b232f87e9d1f40ae92f87ceca592e6326f1296f419ca1", "object_relation": "sha256", "Tag": [ { "name": "217-60-195-219", "colour": "#e8bfdf", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598729, "uuid": "5e737297-0ba8-4aca-97e7-bf464c93f0c9", "value": "T10FF0F46A041A35378B23CD28CB484646B22BEA8098D2374BF2A00D1AA801E8273952", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598729, "uuid": "03262a6f-3276-410a-9f15-2dacd92e7c9e", "value": "12:381kUM8YFEqROpdzh3g9ivFU1AwTh3lHFU1Alh3QHFU1AyGh323FU1A2wh34r0Ae:3D8Y+M4dzxg9mS1A+xBS1AlxQS1ABxgH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787598729, "uuid": "60203cda-b669-4a3a-9e98-a87046846c00", "value": 587, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598729, "uuid": "e4ffcdd3-abe3-43c8-8b08-c17c80b502c7", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd60ed2b-9fef-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787598798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598798, "uuid": "5dc2346c-b7d3-4540-b59b-a7a723c15f37", "comment": "Malware payload (Mirai)", "value": "87e936e45862b3025c7d0b9059beb6e1", "object_relation": "md5", "Tag": [ { "name": "176-65-139-139", "colour": "#fa0b61", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598798, "uuid": "ce8011ba-91eb-4585-a82e-c81bb9804e7c", "comment": "Malware payload (Mirai)", "value": "0fcb8cddfed9c70b99e202646ca6dc82745685c5ab12db933a93f17ac6471a5b", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-139", "colour": "#fa0b61", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598798, "uuid": "69d98048-c836-4795-921e-1aa5a458a0e4", "value": "T134F2E1603709BCB6CD6095B2EEF1CF46F36A93B9D1FA312915000A54ECE661298F53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598798, "uuid": "fc3d7d1a-5311-46ee-982f-b5b3fce4c316", "value": "768:6JTKmOVP3WWkPgb7lPBIqxwQEECBah3zGK0weMs3Uoz9:6AmO4POPN5Evo3F0XJz9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787598798, "uuid": "7b411310-1374-4dd4-9998-92d1d9922440", "value": 36832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598798, "uuid": "98de0dee-d513-4e38-9e5c-84501c3bfc7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd69e04e-9fef-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787598798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598798, "uuid": "5355ca12-3bf8-4e12-81cd-04ffcd71a99b", "comment": "Malware payload (Mirai)", "value": "75296fbb05aa05c98e386a7c7edd048c", "object_relation": "md5", "Tag": [ { "name": "176-65-139-139", "colour": "#fa0b61", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598798, "uuid": "c2ce58af-f650-43bd-8c25-5fffab73023a", "comment": "Malware payload (Mirai)", "value": "9bc48e9fbc56e1b9c9643f1221d518b85498be7ced8dd40301194e7a63a1fbb1", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-139", "colour": "#fa0b61", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598798, "uuid": "721d0763-f8a5-4084-afeb-200b2f8bf337", "value": "T18492D16F9454A0C4D6614837E6ECDACBA2B60BFDE3F4307517A85A2CF26624023B60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598798, "uuid": "f50a4a11-eea9-4831-917a-27868b73b462", "value": "384:y3CFDQy54M7zLnmZFiPThj6r8CKozfdchYC+Gyx2QSHWOCrjchymdGUop5htm:qCmyqM7zLnmZQLh+IWfdzFG/QPOCHcsk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787598798, "uuid": "37a656cc-c707-4ade-b5e6-cc27dbb059d0", "value": 20524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598798, "uuid": "bb5ae662-4b38-4407-a64e-2c43afb9ceaf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd6add71-9fef-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787598798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598798, "uuid": "8b45c1e7-e4f8-4643-9f58-273178dd661e", "comment": "Malware payload (Mirai)", "value": "c60fa779002232fde58108a99a918e6f", "object_relation": "md5", "Tag": [ { "name": "176-65-139-139", "colour": "#fa0b61", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598798, "uuid": "3efdcb87-16b4-4e8f-9a5a-ed4be5dea1aa", "comment": "Malware payload (Mirai)", "value": "880a9ea4c0bfcff656613559449a906f3da211c977fb8e29927b33322ccdd6dc", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-139", "colour": "#fa0b61", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598798, "uuid": "2cf3015b-f925-4161-b4ee-3a2759c66186", "value": "T1C5B3AEEBF64715A2C85243F013C79F8E3E2323909E57A4E76D1E267B15760DB1D0AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598798, "uuid": "a9e6d714-90e9-4a6c-b7c6-bc1302e6f3b4", "value": "1536:pkA9afIgfNMW3zC8aRGGTtJM/qrlpmxJ6nDgJe/LWW:6fIw3e8ZE3MYlphDgJeq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787598798, "uuid": "202efcd6-22c9-4813-a827-e063dc6241c6", "value": 115992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598798, "uuid": "ff636680-41dd-454e-a201-b80647e6c632", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a540be73-9ff3-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787600422, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787600422, "uuid": "84323dbd-668c-44a8-b20d-a855d8623a6b", "comment": "Malware payload", "value": "2a84400795f3aee784c2b348d6b7fec9", "object_relation": "md5", "Tag": [ { "name": "176-65-139-202", "colour": "#aafbf1", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787600422, "uuid": "81764a40-d98a-4187-b526-3568fbe45151", "comment": "Malware payload", "value": "ab4c9f360c6d5f3e0d9a90c713d4ccfb2780ef52da41a028d6516cf9ea5e9238", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-202", "colour": "#aafbf1", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787600422, "uuid": "314b31f9-9c94-4873-92d8-73193c28744a", "value": "T17941FAFE7052B762DFA68E05F260F674B217E1D571CF3A8CF98C6993CC46840726AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787600422, "uuid": "5c0553d7-b3a2-4365-aed1-283c34558b8a", "value": "48:4CCpOCmhpi0p2BpaUGzp2V22G9TezXqD90ooW6urVr4xz4jpyVdhmh:yQFcAf36urVr4xz4jpyVdhmh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787600422, "uuid": "29b94463-2422-47e4-9da0-14ecff489d92", "value": 2121, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787600422, "uuid": "78e20906-3f4f-4c35-a885-034acc73c003", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ceb9283f-9ff3-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787600491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787600491, "uuid": "1b24c079-97b2-41ab-932e-c40643eedc6c", "comment": "Malware payload", "value": "cfbfc61595a3b2eae1d9601cefb24da5", "object_relation": "md5", "Tag": [ { "name": "176-65-139-202", "colour": "#aafbf1", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787600491, "uuid": "edca4e20-b35f-4978-8c80-77fcd7c38f84", "comment": "Malware payload", "value": "3426e4a772946d9aa423cc2332a28ea755e91c8b445c50e29c465c72562d9c30", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-202", "colour": "#aafbf1", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787600491, "uuid": "ed7f1b66-6b44-4d88-baa6-bc7ea1341a7c", "value": "T18641FBFD7052B703DFB68E05F260E674B21BE1D571CF268CF88C6853CC4694076AAA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787600491, "uuid": "801df7ac-0335-4b81-8dec-ebc7ae408a1a", "value": "48:4CCpOCmhpi0p2BpaUGzp2V22G9TezXqD90ooWt0ui0I0rH000zH0a0M0F0I0Q0kp:yQFcAf3uu/JrUNzUXFmJx9SN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787600491, "uuid": "c08b22a1-8384-449f-bc87-a0f3707f686c", "value": 2093, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787600491, "uuid": "39137a40-dd83-4094-97ad-e9af83a489e9", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdc68f58-9ff6-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787601751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787601751, "uuid": "5c9da060-f3e5-4879-a5c7-969df74ca51e", "comment": "Malware payload", "value": "cb11c61dbab4a37722fb077eead7a7f9", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787601751, "uuid": "5777975a-51ea-4017-8387-1b27aa7d3469", "comment": "Malware payload", "value": "c6a8b4dbcb119633516328e7ceb3b07dd6d4c65172209088e551fb9d9a545b6c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787601751, "uuid": "c59eec34-95ff-43f1-807a-dee5602303b3", "value": "T1DB6633BC5A41ACB086ED6B378D821546FFC660ED5BC3EE6E09B005BA31B7064E5076", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787601751, "uuid": "6d494716-96cd-445e-aa98-131c8a6d1ba8", "value": "196608:lSwWiIWK51mLI9hb94/sxbTD2zdrZREYW9U:lSw45QLIT9JbGN3Sy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787601751, "uuid": "d6eb9eaa-711d-4ad8-8753-0bd91df37333", "value": 6933655, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787601751, "uuid": "cb029daf-5919-4e28-8be8-10787080680b", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787529687, "uuid": "f43a7063-9f4e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.10.252:33432/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787530525, "uuid": "e7c706e4-9f50-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.175.117:39636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787531905, "uuid": "1e423a84-9f54-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.249.70:50922/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787533036, "uuid": "c0240188-9f56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.249.70:50922/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787534180, "uuid": "69bdf03d-9f59-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.157.249:54311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787535088, "uuid": "872393b0-9f5b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.246.166:55376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787535565, "uuid": "a3b6544e-9f5c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.40.167:60515/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787537005, "uuid": "fd95337f-9f5f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.247.47:34358/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787537068, "uuid": "2320f062-9f60-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.157.249:54311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787537237, "uuid": "87ee4813-9f60-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.179.208:34336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787538141, "uuid": "a2e54010-9f62-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.35.226:59992/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787538445, "uuid": "5828796b-9f63-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.128.7:35557/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787538569, "uuid": "a206ec42-9f63-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.179.208:34336/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787539882, "uuid": "b0db70ca-9f66-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.35.226:59992/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787540172, "uuid": "5da22580-9f67-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.42.239:41195/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787541672, "uuid": "db9e60ab-9f6a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.251.31:55856/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787541679, "uuid": "df7fe638-9f6a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.249:98/bot", "Tag": [ { "name": "aisuru", "colour": "#af35c8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787541686, "uuid": "e3ad3ee3-9f6a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.78.116:39069/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787541801, "uuid": "288750d4-9f6b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.215.65:33601/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787542581, "uuid": "f998ef7a-9f6c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.173.152:59590/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787542891, "uuid": "b274757e-9f6d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.72.97.172:55334/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543421, "uuid": "ee34e43c-9f6e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/http_files/pito.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543421, "uuid": "ee34ec93-9f6e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/raul.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543421, "uuid": "ee582ec9-9f6e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/http_files/pito.arm4", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543468, "uuid": "0a105400-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/http_files/pito.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543468, "uuid": "0a556335-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.40.70:54217/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543473, "uuid": "0d4e80a5-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/http_files/pito.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543482, "uuid": "122c405b-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/http_files/pito.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543488, "uuid": "15e0ba4b-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/raul.powerpc-440fp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543488, "uuid": "15fb2243-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/http_files/pito.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543488, "uuid": "1605df28-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/http_files/dp.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543488, "uuid": "1633ab7b-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/raul.i586", "Tag": [ { "name": "aisuru", "colour": "#af35c8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543489, "uuid": "16782bae-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/http_files/pito.ppc440", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543489, "uuid": "1692dc97-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/raul.armv5l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "16fedc14-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/http_files/pito.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "170c2498-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/raul.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "170ff8cb-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/raul.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "17304a2b-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/raul.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "17401825-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/http_files/pito.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "176695ab-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/http_files/pito.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "1766bd07-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/http_files/pito.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "17752690-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/raul.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543490, "uuid": "1775c513-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/http_files/pito.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543491, "uuid": "17e95e28-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/http_files/pito.x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543491, "uuid": "17eb31d0-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/raul.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543491, "uuid": "17f56736-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/raul.armv4l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543491, "uuid": "17f9c349-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/bot", "Tag": [ { "name": "aisuru", "colour": "#af35c8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543493, "uuid": "18bc630f-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/raul.armv6l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543493, "uuid": "18e41099-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/.bash_history", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543495, "uuid": "1a199542-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/dropper", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543496, "uuid": "1aa56fdb-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/raul.armv7l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543496, "uuid": "1ac51582-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/http_files/gg11", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543496, "uuid": "1aef1128-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/http_files/pito.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543496, "uuid": "1b0bc81a-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/raul.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543509, "uuid": "22a728b3-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/http_files/pito.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787543844, "uuid": "ea647452-9f6f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.90.186.25:54136/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787544127, "uuid": "92bb4a55-9f70-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.57.123.42:57417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787544138, "uuid": "99bbf7ec-9f70-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.208.110.147:41851/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787544972, "uuid": "8ab3964d-9f72-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.40.70:54217/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787545884, "uuid": "aa31ad7e-9f74-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.208.110.147:41851/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787545928, "uuid": "c4548fc3-9f74-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.74.116:56778/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787545929, "uuid": "c4cd0c0f-9f74-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.240:45646/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787546128, "uuid": "3b703cbd-9f75-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.126.253:47935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787546362, "uuid": "c731ad6a-9f75-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.236.65.160:41635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787546829, "uuid": "dd800a11-9f76-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.245.15:43804/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787547856, "uuid": "41985d8c-9f79-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.126.253:47935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787548268, "uuid": "3754f366-9f7a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.245.15:43804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787548515, "uuid": "ca807921-9f7a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.190.202.146:33639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787550368, "uuid": "1abcb0da-9f7f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.32.199:49971/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787551633, "uuid": "0c8f99d4-9f82-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.115.142:56363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787552719, "uuid": "945b85c3-9f84-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.245.232.186:44492/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787552779, "uuid": "b8167423-9f84-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.31.201.20:41118/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787553083, "uuid": "6d0c49f2-9f85-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.115.142:56363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787553791, "uuid": "13469fe5-9f87-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.44.145.75:51284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787554040, "uuid": "a7604b18-9f87-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.195.233:38896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787554756, "uuid": "520b01ef-9f89-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.222.173:59854/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787554883, "uuid": "9dcdae9f-9f89-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.95.117:55652/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787555295, "uuid": "93759ed8-9f8a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.244.17:47417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787555467, "uuid": "f9d5be8d-9f8a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.140.10:33110/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787556327, "uuid": "fab36018-9f8c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.6.248:33966/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787556366, "uuid": "122bce67-9f8d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.32.199:49971/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787556671, "uuid": "c7e609d4-9f8d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.3.1:51410/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787557445, "uuid": "95495aec-9f8f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.239.124.108/atomic/main_arm7", "Tag": [ { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787557448, "uuid": "96b6c8ac-9f8f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/payphone-blip/gd65h7gfd9834/34jtg8sp7", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787557452, "uuid": "994b76e1-9f8f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_865d4f3e8fa37c05.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787557460, "uuid": "9e32d248-9f8f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:67/dp.sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787557472, "uuid": "a501ab3b-9f8f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_44ef7cc8421220d0.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787557474, "uuid": "a612a450-9f8f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.83.230.144:53523/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787558228, "uuid": "67ddbbc6-9f91-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.3.1:51410/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787558827, "uuid": "ccba824f-9f92-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.40.165:47875/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787560175, "uuid": "f0688d08-9f95-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.126.171:41342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787560280, "uuid": "2ef77a45-9f96-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.244.17:47417/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787560574, "uuid": "ddfde9ac-9f96-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.40.165:47875/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787560769, "uuid": "525edf23-9f97-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.151.113.187:48908/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787560946, "uuid": "bba5d70a-9f97-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.244.218:59145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787561554, "uuid": "2629280c-9f99-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.91.22:38538/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787562013, "uuid": "37bc5f8f-9f9a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.243.195:60941/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787562970, "uuid": "7275792c-9f9c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.194:59841/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787563648, "uuid": "068937ca-9f9e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.243.195:60941/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787564790, "uuid": "af122cb6-9fa0-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.151.32:39869/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565667, "uuid": "b9c1c788-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.88.222:46799/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565667, "uuid": "b9fa7b23-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.7.207:33663/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565669, "uuid": "baeb71d0-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.57.174:55298/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565673, "uuid": "bd9aaf54-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://65.99.181.12:49304/Mozi.m", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565677, "uuid": "bfe0cfc6-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.16.85.54:34815/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565677, "uuid": "bfe48747-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.16.85.54:34815/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565677, "uuid": "bfeca5ae-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.55.170:47643/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565677, "uuid": "bfee2cdf-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.77.48.16:34314/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565677, "uuid": "bff791bd-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.83.105:42030/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565678, "uuid": "c0139c3e-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.173.152:59590/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565678, "uuid": "c0174e25-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.249.4.20:46827/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565678, "uuid": "c018b3c7-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.232.254.209:49853/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565678, "uuid": "c01d961f-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.189.181.54:45438/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565678, "uuid": "c02e391a-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.138.14:53227/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565678, "uuid": "c031b199-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.182.229:47636/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565678, "uuid": "c0451cec-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.22.232:59699/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565678, "uuid": "c06cb844-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.60.37:49335/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565678, "uuid": "c070147b-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.161.11:40866/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565678, "uuid": "c07b017b-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.88.188:59140/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565678, "uuid": "c08aaf69-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.208.111.234:49160/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565679, "uuid": "c09c0227-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.128.7:35557/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565679, "uuid": "c09ceb19-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.208.110.4:52722/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565679, "uuid": "c0a73197-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.180.120:55337/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565679, "uuid": "c0af8a02-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.169.132:47416/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565679, "uuid": "c0af99b2-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.94.134:41053/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565679, "uuid": "c0b58d02-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.112.103:46437/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565679, "uuid": "c0b67669-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.208.111.234:49160/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565679, "uuid": "c0bdaf88-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.200.113.178:44855/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565679, "uuid": "c0be30a5-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.46.27:54563/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565679, "uuid": "c0be83f7-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.56.87:34688/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565679, "uuid": "c0bf37b1-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.58.115.150:34302/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565679, "uuid": "c0c6b128-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.59.108.201:48468/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565679, "uuid": "c0df2fcc-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.119.136:59026/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565679, "uuid": "c0e5ae30-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.83.105:42030/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565679, "uuid": "c0e6d020-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.25.157.124:39654/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565679, "uuid": "c119a174-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.25.163:60566/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565680, "uuid": "c170d8a1-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.192.201:51447/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565680, "uuid": "c171f6b2-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.46.27:54563/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565680, "uuid": "c174524c-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.208.110.42:56136/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565681, "uuid": "c1fa3471-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.219.1.198:34396/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565683, "uuid": "c38c5760-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.169.132:47416/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565684, "uuid": "c3a7588f-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.67.14:42799/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565684, "uuid": "c3af9a9e-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.67.14:42799/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565684, "uuid": "c3cb0948-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.249.4.20:46827/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565684, "uuid": "c3e8fbe0-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.172.9.203:35384/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565684, "uuid": "c3e930f3-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.138.14:53227/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565684, "uuid": "c3e959c6-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.189.181.54:45438/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565684, "uuid": "c3efb6a1-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.58.115.150:34302/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565684, "uuid": "c3f107a7-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.106.241.72:39541/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565684, "uuid": "c4077a97-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.159.144:55955/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565684, "uuid": "c407cc2d-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.41.31:41949/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565684, "uuid": "c4086312-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.94.210:49613/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565684, "uuid": "c4129047-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.180.120:55337/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565684, "uuid": "c412a1fd-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.88.188:59140/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565684, "uuid": "c412a677-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.34.46:47112/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565684, "uuid": "c412a6b1-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.149.220:51784/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565684, "uuid": "c412e0c3-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.231.26:40476/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565685, "uuid": "c46b357f-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.77.51.48:28807/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565685, "uuid": "c473b132-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.200.242:58837/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565685, "uuid": "c47acf50-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.136.173:45735/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565685, "uuid": "c4925159-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.43.212:57854/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565685, "uuid": "c49e61a6-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.15.188.27:35858/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565685, "uuid": "c4b10a84-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.15.188.27:35858/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565694, "uuid": "c9c43e38-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.102.201:45262/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565696, "uuid": "cae8daeb-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.12.60:50944/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787565727, "uuid": "dd93df0d-9fa2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.9.139.117:50595/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566218, "uuid": "026fdc3d-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.236.126:50187/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566399, "uuid": "6e22dd3a-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/lib64/python3.12/site-packages/pip/_vendor/urllib3/__pycache__/fields.cpython-312.pyc", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566400, "uuid": "6e609d29-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/lib/python3.12/site-packages/cffi-2.1.1.dist-info/METADATA", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566400, "uuid": "6ed4e705-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/lib64/python3.12/site-packages/cryptography/hazmat/bindings/_rust.abi3.so", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566401, "uuid": "6f0fd06c-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/lib/python3.12/site-packages/pip/_vendor/urllib3/fields.py", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566401, "uuid": "6f12b3c9-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/bin/python3", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566401, "uuid": "6f42ed7f-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/lib64/python3.12/site-packages/pip/_vendor/urllib3/fields.py", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566401, "uuid": "6f50f64e-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/lib64/python3.12/site-packages/cffi-2.1.1.dist-info/METADATA", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566401, "uuid": "6f6fc6e1-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/.cache/pip/http-v2/5/1/6/5/c/5165cc1b0285d5be5fcbd69fcee68ee8e4f241a135727f89a6043246.body", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566401, "uuid": "6f6fcfe7-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/lib/python3.12/site-packages/_cffi_backend.cpython-312-x86_64-linux-gnu.so", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566402, "uuid": "6f9e43a3-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/lib64/python3.12/site-packages/_cffi_backend.cpython-312-x86_64-linux-gnu.so", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566402, "uuid": "6fa50126-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/lib/python3.12/site-packages/pip/_vendor/urllib3/__pycache__/fields.cpython-312.pyc", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566402, "uuid": "6fa609e1-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/lib/python3.12/site-packages/pip/_vendor/packaging/__pycache__/_musllinux.cpython-312.pyc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566402, "uuid": "6fcdd6ef-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/lib64/python3.12/site-packages/bcrypt/_bcrypt.abi3.so", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566402, "uuid": "6ff8fe3f-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/lib64/python3.12/site-packages/pip/_vendor/packaging/__pycache__/_musllinux.cpython-312.pyc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566402, "uuid": "70097662-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/bin/python3.12", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566403, "uuid": "708f7f32-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/bin/python", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566403, "uuid": "70a0dc2d-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/lib64/python3.12/site-packages/nacl/_sodium.abi3.so", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566404, "uuid": "70cc038e-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/lib/python3.12/site-packages/cryptography/hazmat/bindings/_rust.abi3.so", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566405, "uuid": "71ba37a8-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/lib/python3.12/site-packages/nacl/_sodium.abi3.so", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566406, "uuid": "7227d42f-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.250:889/venv/lib/python3.12/site-packages/bcrypt/_bcrypt.abi3.so", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566408, "uuid": "736485fc-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.151.32:39869/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566631, "uuid": "f8221578-9fa4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.172.170.120:34056/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787566821, "uuid": "694edb14-9fa5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_c598446d103f1138.exe", "Tag": [ { "name": "54e64e", "colour": "#eb829a", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787567119, "uuid": "1b09edc6-9fa6-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.108.86.221:50272/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787567835, "uuid": "c5f8fd6a-9fa7-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.172.170.120:34056/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787568091, "uuid": "5eaf0627-9fa8-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.236.126:50187/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787568141, "uuid": "7c57e90f-9fa8-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.73.228.85:3588/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787568738, "uuid": "e0706d53-9fa9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.188.118:56896/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787570532, "uuid": "0d7a8f2a-9fae-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.188.118:56896/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787570667, "uuid": "5dcafa4b-9fae-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.198.224.131/kushnet.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787570957, "uuid": "0ad31c10-9faf-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.11.81:57639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787571501, "uuid": "4f479022-9fb0-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.32.245:47591/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787572291, "uuid": "25dbd430-9fb2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.82.102:41542/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787572823, "uuid": "62d31d9f-9fb3-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.230.69:47843/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787573664, "uuid": "58742c9a-9fb5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.42.197:42211/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787574443, "uuid": "28dc7811-9fb7-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.208.106.68:55668/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575565, "uuid": "c5a36c30-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/ce52a6", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575565, "uuid": "c5a36e6d-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/efcd2d", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575565, "uuid": "c5a3732c-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/c93345", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575565, "uuid": "c5a3a75f-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/191fb3", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575565, "uuid": "c5a6bb55-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/88c40a", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575565, "uuid": "c5a8ed96-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/2c2aa6", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575565, "uuid": "c5ab3458-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/71e32a", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575565, "uuid": "c5ac1cb9-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/b646e0", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575565, "uuid": "c5ad20aa-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/fc264e", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c5ba68de-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/ecdaae", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c5bae1fe-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/87e848", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c5c1de8d-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/5ba42b", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c5d3697b-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/c17f7f", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c5d39c82-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/cf9fba", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c5d3a744-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/55e9c6", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c5d6b506-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/9c9c3f", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c5daef37-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/d69836", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c5dd6030-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/d799da", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c5f67a54-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/01d9da", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c5fa3e59-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/8bb61f", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c5fcc886-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/cb4d97", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c5fe89d0-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/375de5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c604df84-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/9dc6cf", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c60521dd-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/07c0df", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c6062592-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/77be00", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c607ba9b-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/ea884a", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c610b64e-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/460081", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c62b5ae8-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/2e95b1", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c62e19e2-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/973c93", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c62edead-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/f4cf83", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c62f24ba-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/98b74b", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c6326e5b-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/018391", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c6330373-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/8777eb", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c637db5b-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/3d44b0", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c638e678-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/544c67", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c639e246-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/1f8f91", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c63ada2d-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/f2a73f", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c63af429-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/e9f1be", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c63df868-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/45eaba", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c6492802-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/fd0af6", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c64ac608-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/eb0dd6", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575566, "uuid": "c64d9abc-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/35d27a", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c653fcc1-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/a1dd0f", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c654e2b4-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/695814", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c655b919-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/f81791", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c65cea3c-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/e37793", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c664467a-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/f95e82", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c6653012-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/93779b", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c6670a5e-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/0f798b", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c6683c42-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/df9369", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c678a87e-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/3d923d", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c678ebe3-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/948e52", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c6790cae-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/7616cc", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c6791d94-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/ece1eb", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c67a4b29-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/70d90a", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c67ac922-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/172acf", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c67ae6a5-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/4b4463", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c67b0986-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/80de26", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c683471d-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/dd765c", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c685776f-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/31cc29", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c6872fd4-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/6d91a8", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c68de2e3-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/0f8788", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c68fcfed-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/e86d15", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c68fcffe-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/8d848a", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c690c498-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/7e3c43", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c690e9ad-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/9c9b86", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c691311c-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/c1f86d", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c693fed5-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/dcf6e6", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c695fa4f-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/0950fc", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c6992add-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/7bd475", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575567, "uuid": "c6beabba-9fb9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/f18be5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787575756, "uuid": "37602f37-9fba-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.150.53:53181/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576244, "uuid": "59d7e919-9fbb-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.150.53:53181/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "e45479e6-9fbb-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.17.92/bins/sh4", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "e45736cb-9fbb-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.17.92/bins/mpsl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "e45751de-9fbb-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.17.92/bins/m68k", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "e45f65f1-9fbb-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.17.92/bins/arm7", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "e46234a3-9fbb-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.17.92/bins/spc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "e464602e-9fbb-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.17.92/bins/arm", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576476, "uuid": "e46d0b3b-9fbb-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.17.92/bins/arm5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576478, "uuid": "e5d60406-9fbb-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.17.92/bins/x86_64", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576478, "uuid": "e5d60c3d-9fbb-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.17.92/bins/i686", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576478, "uuid": "e5d60cbf-9fbb-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.17.92/bins/musl", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576478, "uuid": "e5e4101f-9fbb-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.17.92/bins/x86", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576479, "uuid": "e6067448-9fbb-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.17.92/bins/arm6", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576479, "uuid": "e610f360-9fbb-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.17.92/bins/ppc", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576543, "uuid": "0ca03b59-9fbc-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.161.17.92/bins/mips", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576827, "uuid": "b5bbbd2b-9fbc-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.185.202:40429/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787576905, "uuid": "e3edd875-9fbc-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.118.34.3:36309/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577128, "uuid": "6917f485-9fbd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.186/clpmem.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577129, "uuid": "697cac1a-9fbd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos80kghtf8aundm5w.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577129, "uuid": "697d942d-9fbd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos803a4s665bsxdcb.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577129, "uuid": "697e8b25-9fbd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos80yyk1xp4wk7n6u.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577129, "uuid": "697fd12c-9fbd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos80oohdbtg6cxatn.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577129, "uuid": "6980945c-9fbd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos80u7zugihj9iuei.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577129, "uuid": "6990c156-9fbd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_83a2a92978b8b2a2.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577129, "uuid": "69d4b89d-9fbd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos807o8rf1z9w6dtw.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577129, "uuid": "69d67555-9fbd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos80ruty19gsspa3j.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577129, "uuid": "69e3ae89-9fbd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos80mgwf6po4sdzdx.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577130, "uuid": "69ee14be-9fbd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos80op5q3wteyqiqs.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577131, "uuid": "6a8c9ef6-9fbd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_28ae045da50f3847.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577131, "uuid": "6a979c63-9fbd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_def37db2c5087baa.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577131, "uuid": "6ac2e804-9fbd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos80csyqn3qr34bng.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577371, "uuid": "f9a55a7c-9fbd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.141.17:35121/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577622, "uuid": "8f9b57bd-9fbe-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://nwlansing.screenconnect.com/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577622, "uuid": "8fc6f7e2-9fbe-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://students16.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest&t=plgghghg", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577728, "uuid": "cebbf709-9fbe-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.17.194.207:57975/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787577985, "uuid": "68210179-9fbf-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.57.126.32:57417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787578032, "uuid": "83b3add6-9fbf-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.185.202:40429/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787578699, "uuid": "11925370-9fc1-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.118.34.3:36309/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787579471, "uuid": "ddc546be-9fc2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.17.194.207:57975/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787579472, "uuid": "de011f8c-9fc2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.11.81:57639/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787579490, "uuid": "e8ecca41-9fc2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.57.126.32:57417/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580034, "uuid": "2d0b90c2-9fc4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.233.157:38056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580074, "uuid": "451c6330-9fc4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.213.174:44835/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580249, "uuid": "ad357122-9fc4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_d27852ce3dbc58e5.ps1", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580251, "uuid": "ae58d211-9fc4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos80wae4nzzbg1fpw.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580251, "uuid": "ae6b8e18-9fc4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos80bcnn9sqy8tcrp.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580251, "uuid": "ae780e39-9fc4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos80m79ahhsf7tato.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580251, "uuid": "ae882f7e-9fc4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos80qj6rk51m5os5b.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580251, "uuid": "aeaaa369-9fc4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos80563k3418nwt3a.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580275, "uuid": "bcd214fd-9fc4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloudsenterprise26.com/skjsadfi123uv12/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787580629, "uuid": "8f8286ae-9fc5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.233.157:38056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787581090, "uuid": "a2b77478-9fc6-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos80whspapbtb55bf.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787581090, "uuid": "a2d19422-9fc6-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos803z5jxuyazd9cf.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787581091, "uuid": "a2e76b06-9fc6-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos80mf6ex4bct8mq7.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787581091, "uuid": "a302b4d1-9fc6-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos80pgbe49rhqe6zm.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787581091, "uuid": "a3095362-9fc6-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://da607p7qeops0oicos80wrfem8nncpm6k.oast.pro", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787582828, "uuid": "aeae2611-9fca-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.165.195:34416/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787583400, "uuid": "0391b898-9fcc-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.254.154.168:51093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787583734, "uuid": "ca701e49-9fcc-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.74.183:49746/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787584524, "uuid": "a15bd67a-9fce-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.172.186.170:58973/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787584806, "uuid": "49519325-9fcf-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_ba3c4b02363471d3.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787584807, "uuid": "49d1bc07-9fcf-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://imagehopeag.com/hex/traffic", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787584807, "uuid": "4a481c88-9fcf-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_7a330d043d2a8b77.ps1", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787584808, "uuid": "4ab045be-9fcf-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://triapfog.com/security/c8ppwoye50", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787584949, "uuid": "9ebe952f-9fcf-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.190.91:52122/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787585170, "uuid": "223e45bc-9fd0-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.165.195:34416/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787585773, "uuid": "89c49eeb-9fd1-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.254.60:50850/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787586086, "uuid": "44596834-9fd2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.59.108.201:48468/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787586571, "uuid": "654af80b-9fd3-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.150.73:43923/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787586630, "uuid": "889b3125-9fd3-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.190.91:52122/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787586677, "uuid": "a47da9a2-9fd3-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.220.243:39647/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787586684, "uuid": "a8cfd1c2-9fd3-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.77.51.48:28807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787586732, "uuid": "c5bf645c-9fd3-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.220.243:39647/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787587034, "uuid": "796b26b0-9fd4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.132.103:47751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787590933, "uuid": "8d809480-9fdd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.96.245:56165/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787591117, "uuid": "fb14b2f3-9fdd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.122.113:34835/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787592806, "uuid": "e9fdf76f-9fe1-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.34.46:47112/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787593593, "uuid": "bee9c14f-9fe3-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.122.113:34835/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787593829, "uuid": "4b68b82b-9fe4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.46.70:60400/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787594905, "uuid": "cce797cf-9fe6-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.220.239:56935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787595619, "uuid": "76857098-9fe8-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.252.99:43457/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787595684, "uuid": "9d7dda35-9fe8-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.252.99:43457/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787595741, "uuid": "bf4cab86-9fe8-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.16.71:56706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787595925, "uuid": "2cf69f60-9fe9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.46.70:60400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787596582, "uuid": "b4a3c864-9fea-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.220.239:56935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787596946, "uuid": "8d41d13f-9feb-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://139.59.240.15/kworker", "Tag": [ { "name": "139-59-240-15", "colour": "#bd0a9b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787597355, "uuid": "818895c7-9fec-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.16.71:56706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787597536, "uuid": "ed662bd4-9fec-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.186.201/setup.exe", "Tag": [ { "name": "45-88-186-201", "colour": "#1a6cca", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598505, "uuid": "2e906eb6-9fef-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.89:8888/f9d3a7c2/bot_arm", "Tag": [ { "name": "94-154-43-89-8888", "colour": "#515afc", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598670, "uuid": "91393a4f-9fef-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.195.219/boss/pure.dat", "Tag": [ { "name": "217-60-195-219", "colour": "#e8bfdf", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598729, "uuid": "b46d955a-9fef-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.60.195.219/boss/boss.bat", "Tag": [ { "name": "217-60-195-219", "colour": "#e8bfdf", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598797, "uuid": "dcc84c32-9fef-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.139/t.sh", "Tag": [ { "name": "176-65-139-139", "colour": "#fa0b61", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598798, "uuid": "dd9984f1-9fef-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.139/arm", "Tag": [ { "name": "176-65-139-139", "colour": "#fa0b61", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598798, "uuid": "dd999053-9fef-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.139/arc", "Tag": [ { "name": "176-65-139-139", "colour": "#fa0b61", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598798, "uuid": "dd99ab3e-9fef-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.139/arm5", "Tag": [ { "name": "176-65-139-139", "colour": "#fa0b61", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598972, "uuid": "44da7c85-9ff0-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.104.73:32923/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787598972, "uuid": "450823fd-9ff0-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.104.73:32923/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787599048, "uuid": "7268705d-9ff0-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.150.192:54189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787599944, "uuid": "8892f227-9ff2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.200.242:58837/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787600125, "uuid": "f48e2c66-9ff2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.35.246:42450/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787600237, "uuid": "36f02f1b-9ff3-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.90.186.25:54136/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787600422, "uuid": "a5668f36-9ff3-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.202/totolink.sh", "Tag": [ { "name": "176-65-139-202", "colour": "#aafbf1", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787600492, "uuid": "cef608b3-9ff3-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.202/tplinkrouter.sh", "Tag": [ { "name": "176-65-139-202", "colour": "#aafbf1", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787601015, "uuid": "06f5fa7f-9ff5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.33.215:8080/main.py", "Tag": [ { "name": "84-54-33-215-8080", "colour": "#0fb53e", "exportable": true, "hide_tag": false }, { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787601017, "uuid": "07fc5daf-9ff5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.33.215:8080/Invoice.ps1", "Tag": [ { "name": "84-54-33-215-8080", "colour": "#0fb53e", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787601018, "uuid": "087517ca-9ff5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.33.215:8080/Invoice.zip", "Tag": [ { "name": "84-54-33-215-8080", "colour": "#0fb53e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787601018, "uuid": "087517e8-9ff5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.33.215:8080/Invoice.lnk", "Tag": [ { "name": "84-54-33-215-8080", "colour": "#0fb53e", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787601388, "uuid": "e5409bc1-9ff5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.54.33.215:8080/Payroll_statement.pdf.pdf", "Tag": [ { "name": "84-54-33-215-8080", "colour": "#0fb53e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787602881, "uuid": "5ebac58c-9ff9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.29.91:43741/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787603369, "uuid": "81b4bd19-9ffa-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.35.246:42450/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787605169, "uuid": "b292ac6c-9ffe-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.29.91:43741/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787605404, "uuid": "3eff5b05-9fff-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.48.192:43573/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787606605, "uuid": "0a77811c-a002-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.66.146.183:33678/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787607324, "uuid": "b7826e8e-a003-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.105.77:56220/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787607387, "uuid": "dca03bb2-a003-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.21.206:51805/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787607921, "uuid": "1aed8e67-a005-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.66.146.183:33678/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787608461, "uuid": "5d27dafc-a006-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.105.77:56220/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787609181, "uuid": "0a162c62-a008-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.21.206:51805/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787609952, "uuid": "d5daf898-a009-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.215.224.64:33429/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787611032, "uuid": "59972ed5-a00c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.82.125:50246/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787611885, "uuid": "55ecf655-a00e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.17.29:54916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787612238, "uuid": "28789249-a00f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.34.62.251:59959/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787612608, "uuid": "0477016e-a010-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.0.60.188:40182/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787612742, "uuid": "54d35098-a010-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.142.44:32773/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787612908, "uuid": "b78c02be-a010-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.150.192:54189/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787613127, "uuid": "39f8fe8c-a011-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.254.228:59701/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787613426, "uuid": "ec3a3ee8-a011-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.157.210.26:37655/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787613669, "uuid": "7cf88bc5-a012-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.109.97:40474/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787614101, "uuid": "7ecfce1f-a013-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.143.190:39217/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787614223, "uuid": "c7a6e004-a013-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.142.44:32773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787614625, "uuid": "b72331d5-a014-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.254.228:59701/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787615422, "uuid": "91e06028-a016-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.93.139:40959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577726, "uuid": "cd5db6c1-9fbe-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.17.194.207", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787584506, "uuid": "96cfedc3-9fce-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.172.186.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787586551, "uuid": "597f23d8-9fd3-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.150.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560926, "uuid": "afd75291-9f97-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.224.244.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b9389063-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.46.27", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787572813, "uuid": "5ccd30d9-9fb3-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.186.230.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787612711, "uuid": "41fdc794-a010-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.142.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787583365, "uuid": "ee96c278-9fcb-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.254.154.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565678, "uuid": "c083d7d2-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.93.136.173", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787530507, "uuid": "dcba233f-9f50-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.175.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787562009, "uuid": "35b2a871-9f9a-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.243.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b92cdb4e-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.112.103", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b931969d-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.67.14", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787583726, "uuid": "c5b68e04-9fcc-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.74.183", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787535549, "uuid": "99d08a79-9f5c-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.40.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b92779bb-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.7.207", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565678, "uuid": "c052d73c-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.200.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787595730, "uuid": "b8c22804-9fe8-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.16.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787546826, "uuid": "dbb06a61-9f76-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.245.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565678, "uuid": "c083a455-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.15.188.27", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787595613, "uuid": "72ead0c9-9fe8-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.252.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576886, "uuid": "d89f5fac-9fbc-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.118.34.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b9293048-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.28.161.11", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787544124, "uuid": "91197251-9f70-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.57.123.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b929a305-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.25.163", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787568735, "uuid": "de7f749e-9fa9-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.188.118", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787564768, "uuid": "a1ac49fb-9fa0-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.151.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787607364, "uuid": "cf5bee44-a003-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.21.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787546108, "uuid": "2f764a62-9f75-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.126.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b93a631d-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.88.188", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560149, "uuid": "e09b5158-9f95-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.126.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787540169, "uuid": "5bbfcd64-9f67-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.42.239", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787594890, "uuid": "c40b15fc-9fe6-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.220.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787586671, "uuid": "a0f40d6c-9fd3-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.220.243", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787585769, "uuid": "87ab3cfd-9fd1-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.254.60", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b9453f25-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.57.174", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787596927, "uuid": "82632d66-9feb-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.59.240.15", "Tag": [ { "name": "139-59-240-15", "colour": "#bd0a9b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787591112, "uuid": "f7dcdc4e-9fdd-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.122.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787566626, "uuid": "f5241219-9fa4-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.172.170.120", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b9293225-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.172.9.203", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b93774fd-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.56.87", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565678, "uuid": "c06ddfbd-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.77.51.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565679, "uuid": "c10d6734-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.43.212", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787600110, "uuid": "eb8ba85d-9ff2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.35.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b930402b-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.138.14", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787582825, "uuid": "acc9a0df-9fca-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.165.195", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787571492, "uuid": "496e0257-9fb0-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.32.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b9299296-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.192.201", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787566207, "uuid": "fb9c6fc2-9fa3-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.236.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b92d6ae5-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.169.132", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787531889, "uuid": "14c597a3-9f54-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.249.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787613665, "uuid": "7aee4873-a012-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.109.97", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787612230, "uuid": "2353be13-a00f-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.34.62.251", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543827, "uuid": "dfde440d-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.90.186.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787560747, "uuid": "450f0168-9f97-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.151.113.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b922f647-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.16.85.54", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b93adcf3-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.59.108.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787542870, "uuid": "a5c27364-9f6d-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.72.97.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787607306, "uuid": "accd10f3-a003-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.105.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787551626, "uuid": "08ecbe19-9f82-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.115.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787570951, "uuid": "07751b1a-9faf-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.11.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b92af257-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.200.113.178", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b92ccc54-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.180.120", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b93adccd-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.94.134", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580013, "uuid": "208b827c-9fc4-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.204.233.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787576825, "uuid": "b472d170-9fbc-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.206.185.202", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787605388, "uuid": "352d614c-9fff-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.222.48.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787553786, "uuid": "0fe8aec2-9f87-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.44.145.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787554865, "uuid": "93140415-9f89-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.69.95.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b9284885-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.22.232", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787590929, "uuid": "8b470eb1-9fdd-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.96.245", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598968, "uuid": "42cdcf67-9ff0-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.104.73", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787561526, "uuid": "15922596-9f99-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.91.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787543465, "uuid": "0875fecf-9f6f-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.40.70", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787554744, "uuid": "4b11d73d-9f89-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.236.222.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787555284, "uuid": "8cbf5a43-9f8a-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.244.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787538425, "uuid": "4c60d0a3-9f63-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.242.128.7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565679, "uuid": "c10e3274-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.12.60", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787599032, "uuid": "68a8d472-9ff0-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.150.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787570653, "uuid": "55c49a85-9fae-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.198.224.131", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787597530, "uuid": "e9a5508e-9fec-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.201", "Tag": [ { "name": "45-88-186-201", "colour": "#1a6cca", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787568127, "uuid": "7449f376-9fa8-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "49.73.228.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787565666, "uuid": "b92969f5-9fa2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.58.115.150", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787614085, "uuid": "7521d117-a013-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.143.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787545925, "uuid": "c29719d6-9f74-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.156.240", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787541785, "uuid": "1f018e5d-9f6b-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.215.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787587029, "uuid": "765febe2-9fd4-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.132.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787534167, "uuid": "625c3db3-9f59-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.157.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787557445, "uuid": "94fad6da-9f8f-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.83.230.144", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787601014, "uuid": "05fa8b09-9ff5-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.54.33.215", "Tag": [ { "name": "84-54-33-215-8080", "colour": "#0fb53e", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "python", "colour": "#25a4eb", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787567107, "uuid": "143dbc86-9fa6-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.108.86.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787598487, "uuid": "23be6e37-9fef-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.43.89", "Tag": [ { "name": "94-154-43-89-8888", "colour": "#515afc", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787552707, "uuid": "8cfd762d-9f84-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "96.245.232.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580254, "uuid": "b035407b-9fc4-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloudsenterprise26.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577127, "uuid": "68992f11-9fbd-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos803a4s665bsxdcb.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787581089, "uuid": "a1e5feb4-9fc6-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos803z5jxuyazd9cf.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580249, "uuid": "ad826f95-9fc4-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos80563k3418nwt3a.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577127, "uuid": "6882f9d6-9fbd-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos807o8rf1z9w6dtw.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580250, "uuid": "ad9d4415-9fc4-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos80bcnn9sqy8tcrp.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577129, "uuid": "69e44d79-9fbd-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos80csyqn3qr34bng.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577127, "uuid": "689a0847-9fbd-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos80kghtf8aundm5w.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580249, "uuid": "ad7fbdb5-9fc4-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos80m79ahhsf7tato.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787581089, "uuid": "a1e398ab-9fc6-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos80mf6ex4bct8mq7.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577127, "uuid": "689ac358-9fbd-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos80mgwf6po4sdzdx.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577127, "uuid": "6899ba2e-9fbd-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos80oohdbtg6cxatn.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577127, "uuid": "689be3dc-9fbd-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos80op5q3wteyqiqs.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787581089, "uuid": "a1e083c6-9fc6-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos80pgbe49rhqe6zm.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580249, "uuid": "ad8ecab5-9fc4-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos80qj6rk51m5os5b.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577127, "uuid": "689ceb46-9fbd-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos80ruty19gsspa3j.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577127, "uuid": "689b5fd2-9fbd-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos80u7zugihj9iuei.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787580249, "uuid": "ad8e1977-9fc4-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos80wae4nzzbg1fpw.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787581089, "uuid": "a1e095b6-9fc6-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos80whspapbtb55bf.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787581089, "uuid": "a1e87a95-9fc6-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos80wrfem8nncpm6k.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577127, "uuid": "689c287f-9fbd-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "da607p7qeops0oicos80yyk1xp4wk7n6u.oast.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787584806, "uuid": "494999f1-9fcf-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "imagehopeag.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577611, "uuid": "88b498f3-9fbe-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "nwlansing.screenconnect.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787577611, "uuid": "88b4eafb-9fbe-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "students16.screenconnect.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787584806, "uuid": "49434e93-9fcf-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "triapfog.com" } ] } }