{ "Event": { "published": true, "date": "2026-04-12", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-12", "timestamp": 1776039323, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "57ccdff1-a6b9-4bd1-ae5c-64f7cf7973b2", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1775952008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775952008, "uuid": "56f0d425-b9af-4850-be0e-30d758ea0131", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775952008, "uuid": "bfa4bbd7-3fa0-4035-ad84-b65d5e4b53bf", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775952008, "uuid": "9084d780-9903-48f9-a50d-8dc835d866d0", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775952008, "uuid": "46d57727-a76a-4de6-a90b-8896f4d2ecbf", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775952008, "uuid": "1b0771f5-8d9b-43ce-85f0-660a64df133d", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1775954891, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775954891, "uuid": "2aad98f8-90bc-4127-b529-48cb81b5e263", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775954891, "uuid": "c74d9aef-cbab-41bd-a9a5-72a0f6f1861b", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775954891, "uuid": "7323be9b-4169-42f3-bc1c-29fb986d8379", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775954891, "uuid": "3dfe94a7-faa1-4522-a233-036344353672", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775954891, "uuid": "be172068-0941-4605-9b69-d560ac0a2b73", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775955014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775955014, "uuid": "63c19187-e5ec-49d2-acaf-09003cec42da", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775955014, "uuid": "8e7efb1f-4eae-439a-84dd-a4e262e9d299", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775955014, "uuid": "065bf3ab-21c3-423b-a99d-55dd6d982239", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775955014, "uuid": "f61b7da8-1902-4f26-b004-5f7fbafe95ff", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775955014, "uuid": "f830d269-a15a-4a4b-a215-5b0fedf1e63a", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3eee45ee-3626-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775967331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775967331, "uuid": "2fe3e026-7b37-41ff-a0c2-7b96f5034c10", "comment": "Malware payload", "value": "0a25b4cde40bba00fc0e4b8fa622c979", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775967331, "uuid": "97bbcd75-ef5e-48be-82de-2b519d5e3524", "comment": "Malware payload", "value": "a6667315910953888a2809f765a78c867fd9dd6e3f5d38625f4c59a84ce6bb8b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775967331, "uuid": "c65a299a-874e-4a8c-9ea3-f6b3439a25a7", "value": "T1288309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775967331, "uuid": "1f154415-2d1b-46e7-9949-f19dc04bc2f7", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbn6Wa0VN/:XEKltp9txAX/yr2pb6WxVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775967331, "uuid": "3793a445-b680-45db-a406-ee8946105214", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775967331, "uuid": "c8cf34af-5191-4928-b7cd-9097d1c87dee", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ae372f1-3626-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775967351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775967351, "uuid": "d2566614-97e4-4d1a-8d8f-bac9eec47c93", "comment": "Malware payload (Mirai)", "value": "128ae2ceedb20829a6c1ed22b035c8ee", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775967351, "uuid": "cca1b82c-9c27-4f73-995f-44a4b1e4e0a7", "comment": "Malware payload (Mirai)", "value": "d9cf616d3ee2e3876c290d87b32ee7ae84d0bdbaabaad7e2345e85a480e2004e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775967351, "uuid": "e4560865-c9b3-4596-bf18-9a3c156ab15d", "value": "T119341902A8528A53C5C21B79BB5F46593733AB34D3DB7302DA18AFB42F476DE0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775967351, "uuid": "a0949ea2-4a33-452e-804e-5ab55b235771", "value": "6144:XAUxYupsZDff/aj4s7fjOyCShXQuyrnmW2hVDZI0/16O7Nc:XtxuZrf/a57bOyRX2nmW2hVD60/16O7G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775967351, "uuid": "1fa0f3fe-5d5a-48b7-922c-e61da8208af1", "value": 234578, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775967351, "uuid": "2ffa7039-36e4-46f5-8400-8b69f0b48c7e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "448cd536-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775967516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775967516, "uuid": "1e746861-2d4a-444f-8002-53c05e09fa81", "comment": "Malware payload", "value": "a942530b3fc2213ad0de0731fe417f2e", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775967516, "uuid": "7da69ef1-7e0a-40b5-ae7c-ef6a6d72a97f", "comment": "Malware payload", "value": "a6ffc5f875944f63ee69dcf49460d2b7392ce9214c3c5f7a3b34a80ed1ac6680", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775967516, "uuid": "5b0a1572-22ce-4639-8861-a0496a7bb8e7", "value": "0B73121613A925A152314AF1E7FE6F88F54D2A6C8FF1AC24BC217C68ED3336D1CD5518", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775967516, "uuid": "31747542-a9df-4b49-be4b-0b63ff2cd476", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/Jl:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775967516, "uuid": "a3bbe783-8927-4a43-b380-4ed0336b3500", "value": 76744, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1699c40c-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775967815, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775967815, "uuid": "79c07eef-3b31-4422-af89-f72fabc3ca1b", "comment": "Malware payload", "value": "21ab19d00f6577ebcb2e719b8a52344c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775967815, "uuid": "aa229a90-1f54-4bf1-b4d8-d5d51b469fe9", "comment": "Malware payload", "value": "898e00110e699b1381509252bd0614c8ffe8e04c7692678bf3eeaecf131f8af0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775967815, "uuid": "9fd718ee-fac5-4b73-89ee-6c51eae84487", "value": "D953020233AA29B196714AF1E7FDBB88E6493D588FF26C256C113D6CF97239D1CC4908", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775967815, "uuid": "8c1ba398-b183-4108-b2c6-9020fcd1140e", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8Px2:yYI0ARqw1qAEv7UIFM8oJorFquyjT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775967815, "uuid": "e52f938e-63be-49b0-95c7-93a0a10747c4", "value": 65160, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "964201d8-3628-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775968337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775968337, "uuid": "e36f96a0-c060-4034-b5d5-6b5e3beaa650", "comment": "Malware payload", "value": "e1d7f97db5859151158b10cccb3b9c26", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775968337, "uuid": "29714fdb-e989-4b53-9fc6-8b0e93898a39", "comment": "Malware payload", "value": "303cffbe11186229274f379adf69a1caccd7eed0a13c6f55a657c5fe71d74194", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775968337, "uuid": "20aecdb8-9052-4e9b-8b25-6e998c0a4fbf", "value": "T171931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775968337, "uuid": "d87c10a3-7273-48be-8d0e-a30815efb085", "value": "1536:0Byp1tF/uwMmAIa14oXx+IMepeV7tb73WdxCrCitkb5fv2v05xsprCK71sPyKHt8:08jIL0GitkbFv2v05xsprZ1sPyAt3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775968337, "uuid": "bb481f76-cb01-4b9c-947d-e4806911b634", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775968337, "uuid": "57f75947-2460-4255-8247-095f0753af5b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47620ce2-35f6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775968616, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775968616, "uuid": "d04ff92f-ac9c-4f0e-98ec-8e0e24606eb1", "comment": "Malware payload (Mirai)", "value": "c1f1f54d964782d39e9d344a8ada3ef8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775968616, "uuid": "add23f4e-dcc5-424d-b746-369a389870ea", "comment": "Malware payload (Mirai)", "value": "cebc631971fb334a22a64f013505ff0bfd90b4ce1455db1085f40775d178aa80", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775968616, "uuid": "f39c12bb-250b-4aca-80f6-e5324962beab", "value": "T16D241C01B8518F53C5C32BBBF7DF42953736672497DB7302EA24AEB42F4669D1E2A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775968616, "uuid": "2a92e266-b753-4c60-8381-a676eeb3f735", "value": "6144:TlTTn0UqxAniWSPFJhlIzy+KJKHtEqZ06L18Hts1QS1:TlT7ixA2NJDIFKJKHtEqC6L18Hts1QS1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775968616, "uuid": "09568687-079a-4725-838c-483b4693224c", "value": 218600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775968616, "uuid": "fa94f3a8-056a-412c-951a-292cea53b079", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9db8d24-361c-11f1-bc00-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1775968842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775968842, "uuid": "54db5784-1644-43ce-b4c7-07f45e83393b", "comment": "Malware payload (NetSupport)", "value": "6218717393fbe8db15eaf7ba7d4da819", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775968842, "uuid": "4d39d4ce-767b-4051-b122-d730c8eb072e", "comment": "Malware payload (NetSupport)", "value": "1d49331f878c786d785c6e242c96fc9292255bff9fa2d18d25a3987ea827310d", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775968842, "uuid": "f5e7625f-bfbc-4cea-ac26-a9b9982c56aa", "value": "T10E064B07ACBD8CE9C0A9A5344433A256BF2478405B3173D72BE1B7682E73BF09975B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775968842, "uuid": "375c1994-203a-491b-9163-d963f97ce46a", "value": "3271ee162568f50a6810be9b8973807f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775968842, "uuid": "7520babf-e70c-444e-bf51-22e084613242", "value": "49152:YRd3lp9WSvTs8TqF9wob3khDWFjZKQcFvsaU6OXcpO:YFMId0cO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775968842, "uuid": "073261ce-fce6-47d7-8dd9-37fbd7b3787c", "value": 3740696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775968842, "uuid": "330c94cb-333f-424a-9c08-01f4f3bfe360", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8edcb00a-35ef-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775969176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775969176, "uuid": "311fe1c6-4722-43ed-a8f7-22eb9e349271", "comment": "Malware payload (Mirai)", "value": "7a576b8ee88db15bb10be465d1b608d1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775969176, "uuid": "21df4d7c-73b2-44a6-9136-1ec55d47d8c2", "comment": "Malware payload (Mirai)", "value": "a0b8e360dacef8f07ad5376f24c32db347dbac14b9b9b0c94c9b43d478686edc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775969176, "uuid": "6959395e-9ea9-4900-9bce-caeada40f46d", "value": "T16544F8066F910FF7C8AFDF3702EB0A11248DE41727A62B367638E978B60A54E55D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775969176, "uuid": "e8541f5a-3f68-4155-a33f-ed82a9afdf29", "value": "6144:i2Rkz0w51LV9kpBw3AOgmsK6yB1hWF5NqohWUkzn7MwA0:im60wvVip0gyB1hWF5NqohWUkzn7MwA0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775969176, "uuid": "d7836e67-d55f-434f-bc43-582aec632f9f", "value": 261444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775969176, "uuid": "449771f7-7be6-4e1b-b27b-4a9c5ed49377", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c46fafe-362b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775969501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775969501, "uuid": "dbe6e051-f2c3-4cd5-9656-8322405f3669", "comment": "Malware payload", "value": "ad58853212d3313b61cf335f41374ea3", "object_relation": "md5", "Tag": [ { "name": "agent", "colour": "#cb166c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775969501, "uuid": "a7aa5079-f1e9-4904-9a5c-72e9dbe4b245", "comment": "Malware payload", "value": "b70c6cbfaced495d9bbd104fa8ced3cc915e0910d47e8cd1a5d58b1a625804ff", "object_relation": "sha256", "Tag": [ { "name": "agent", "colour": "#cb166c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775969501, "uuid": "81d63d44-5913-407e-9163-b845d53b2d51", "value": "T19B5833DAAC10AD168D061106B79F0A1BC8D4C9DF9659E79EC3B11BD6ECCF896D0023", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775969501, "uuid": "2f01ed2f-a4be-4c1e-888a-c7d3b83d0677", "value": "3145728:JBgzvCTGZsdKoV9fcoxyqbhlTBwmRR1faxoAcKQ:Yzo8j09Dv9gazaxoAcj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775969501, "uuid": "0a019f9b-eb5a-4e02-b7d5-f2c390f6e472", "value": 129698990, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775969501, "uuid": "bbaf5061-f20b-4e87-aa8b-3355b743c38c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aca3319b-362c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775970092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775970092, "uuid": "3a022266-c52e-40f8-9c41-3675af5486f0", "comment": "Malware payload", "value": "b0183b167ef8e44f417018754461eccb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775970092, "uuid": "7c983174-7344-4426-a572-91b81bb18a22", "comment": "Malware payload", "value": "3ef780b13a2633cacda4d1552fc2430eb91abf4aced7f3c16da0147551f0b519", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775970092, "uuid": "919fb591-caa0-43cb-82ac-3936036e15e7", "value": "T1B793E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA623895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775970092, "uuid": "11f9e587-5b48-43c9-a3be-1b6c332d15a9", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXqIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYP1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775970092, "uuid": "e06f489a-f0d9-4a18-a172-601ce8e2f741", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775970092, "uuid": "14b0a2d4-d294-434f-b626-ea131c9d316d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68879f0c-35f6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775970645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775970645, "uuid": "7a799828-e5cc-4b6f-8a92-a5fd1813ed63", "comment": "Malware payload (Mirai)", "value": "85e0f48efb4c1e440f5f6f387dafe4d0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775970645, "uuid": "c46f771d-5fc7-498e-b5f5-367df4f02227", "comment": "Malware payload (Mirai)", "value": "d5ba31f3cc0a1ac9ae8e0f31c93aa8d730f47d9ed4241cba168c69547711d916", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775970645, "uuid": "396e3285-fb66-40e1-b415-0c9210368313", "value": "T13C243A46AA408B13C4D72BBAFBDF425633339B54D7E723059528AFB43F8679A4F225", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775970645, "uuid": "25f3d125-d162-44bb-8a51-2c98a8634de6", "value": "6144:wdsy5kWC7FPdGenaB8V8nau41U/m8Fk1HKQdM/RBzGy:wqym5dGenaKV8nau4iOmlQm/rzGy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775970645, "uuid": "ef4f5c5a-7f7c-45e7-bc08-c4f491c585ac", "value": 214185, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775970645, "uuid": "cfa66de1-478c-4163-a6e0-88c764d4cfcd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf35c1ca-3630-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775971868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775971868, "uuid": "4fa59709-c947-419b-87ae-200ade58d1de", "comment": "Malware payload", "value": "f7145997f75d04c1a5d92ce1d912cf54", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775971868, "uuid": "7de2e8f5-e7a9-497a-99cd-0e4acaa8885e", "comment": "Malware payload", "value": "de419b36f5bff09b43be3d86b60959ab0b7dd5005ef7361eb322494ddfd2fe41", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775971868, "uuid": "c71076e3-4549-43d6-ae7c-60f5b370feed", "value": "T1EE753364022FCE92E49ED9F90BF0D996380FB4F548DD5C8A6D632E4792385AD24C61", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775971868, "uuid": "5f45e0c5-a42a-4fb6-b928-86cc8b8aabac", "value": "49152:vrHZUl7Hq7+lgM2pGbm+QTyNSiYpVgj2tsJVgB+E:vrZ6Lq7MWjTyEiy62tiV6+E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775971868, "uuid": "90bdd1ed-d93d-45d1-95f0-2e533299a097", "value": 1685375, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775971868, "uuid": "7d0a0f96-119c-41a3-ab26-6030a02031be", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f04ec4a9-0334-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775977387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977387, "uuid": "502a6de4-f588-4536-b02f-0d5587d49fb9", "comment": "Malware payload (Gafgyt)", "value": "079f4ed2c15db7156e5e6f7468e95327", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "stopmalwareservice", "colour": "#bce6dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977387, "uuid": "b6f3e36c-95e2-470c-b0b3-3650b0275c2f", "comment": "Malware payload (Gafgyt)", "value": "1fa1151854b5dc78878b55bab4a533ca6434e9b93c2231ac62773efd79bd104a", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "stopmalwareservice", "colour": "#bce6dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775977387, "uuid": "bb1ed18f-4415-4608-8f43-844da12e9e93", "value": "T199762AD7B9924842C4E43777A8FE80C472631EBA9B8612576D06FE3C3ABE1D91E353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775977387, "uuid": "cab49f7f-3a1b-4b17-be61-4854cf0ec6c4", "value": "49152:mjeb9BoJxCKk+P7yULH/BAAZW99FkycOommlqLjlV+NFw2HtUfANd+rrVZ5EV:EeZBi7yo6N2Htxir5EV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775977387, "uuid": "42de07c2-2fe8-4241-a53d-f6d087f377f9", "value": 7143572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775977387, "uuid": "fabb08a2-5899-4039-9e93-c2404113fa7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efc36382-0334-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1775977387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977387, "uuid": "e63d7069-32be-4aa4-be6f-2125bbb1cd84", "comment": "Malware payload", "value": "a873a9e36eb67dc394595fc34db9e30e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "stopmalwareservice", "colour": "#bce6dc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977387, "uuid": "209b954b-d20c-4a7e-bfc8-2a8e6ff60991", "comment": "Malware payload", "value": "ad9abbacc85360db2fce1f25a6978e02848a9b6588e30438a089ad8620a3e118", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "stopmalwareservice", "colour": "#bce6dc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775977387, "uuid": "ad8f61ff-7866-4f89-96f6-9f1a628d9c6e", "value": "T169765AC7FCA404A9C0AEE33589629163BA717C485F2123D72B50FF682F36BD06A757", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775977387, "uuid": "d1adb0cf-43b2-4f00-b154-a04df5022bd8", "value": "49152:+gZDlTVfPP05lX3X9RQWCCRxvWH3amzYmL3wWIo3baPAHlUoxwZPPZRitGi+fGDt:+wzHbAR6YmjRiPAFyF1VcBqEf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775977387, "uuid": "68fe2925-85ee-4622-9264-c68edd591cc2", "value": 7164052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775977387, "uuid": "5ab16551-cf8d-4097-82a0-6adef88248ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1d5e255-0334-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1775977389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977389, "uuid": "bfc890ab-264d-4fbc-9ca1-c84c8086afe3", "comment": "Malware payload", "value": "ea01ff8af651492adf0198e7462c2c97", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "stopmalwareservice", "colour": "#bce6dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977389, "uuid": "ccbcd661-2b4c-466e-9893-37e66c553267", "comment": "Malware payload", "value": "1f9d84dddfde1167a4c51ca35e0b8cb9aa22fb4f0e909b52587b542fc88e0430", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "stopmalwareservice", "colour": "#bce6dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775977389, "uuid": "d2f9fd67-e81d-4e68-9fa1-9a81736dfbea", "value": "T131864A977A68E70FC22423345DB2CAA827691C9545D79617B341FF08F9B20AD4E6EC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775977389, "uuid": "4424cd56-872e-4217-8cac-4f92c77f25df", "value": "196608:UMKEKj0d1afXzEOIgP/BDzyjLWrK8j6fYBRnCL:UMKEKj0d1afXzEOIgP/BDzyjLWbj6fYi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775977389, "uuid": "6e80f50f-6e1f-41ff-bbfa-382431b4ef21", "value": 7864499, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775977389, "uuid": "dacb39f3-09ee-4c50-9902-51650f218087", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775977765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977765, "uuid": "3c30fec7-1798-4981-8c5c-1b5ed2eaa1e5", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977765, "uuid": "c82fd34d-7090-41dc-941d-375df76217e5", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775977765, "uuid": "19b67d5b-a952-4a24-993a-a66a99b2249f", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775977765, "uuid": "77611080-23c3-471f-85c3-0b9cfb1ca9d3", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775977765, "uuid": "784dcb2e-bbd4-47e6-83ee-92526f7bb928", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7000b9f7-3643-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775979907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775979907, "uuid": "dd99bb9a-9693-40c3-9578-378c1caf9c56", "comment": "Malware payload", "value": "c500f58c1abbd7e476af0ff65c8b9480", "object_relation": "md5", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775979907, "uuid": "f6a355f9-e786-424d-bfcb-f9b3dd135453", "comment": "Malware payload", "value": "026603cdbbf78cda5c213649ab070c794f56e9555f8fc9d2bae84f4f51bc6cc8", "object_relation": "sha256", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775979907, "uuid": "a0087503-8e9a-4eda-b62e-08fe907a3f01", "value": "T112A833A8B64F3E5961E003766705CED1B919CAABD20647CCCE503FEAE4C59E72D901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775979907, "uuid": "67a06c3f-250e-40db-921c-6f8f275f47ff", "value": "6291456:Jtq/2gIIlmqgE6zmm9VBGTqtYx6iweAPosg7HH0:Jtm2amBE6zmmHNtYxbL0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775979907, "uuid": "ea04bc77-2736-445d-ade2-3a6156848be8", "value": 207804047, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775979907, "uuid": "1aaa93a1-eb3c-4aeb-a3f2-40ddfd52b660", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e45cffef-3646-11f1-bc00-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1775981353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775981353, "uuid": "7c121861-80e9-48bc-b4cc-fcddd99a70a8", "comment": "Malware payload (SantaStealer)", "value": "1f7aa3a0425d198ff16df8e903d56aac", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775981353, "uuid": "5d9a7c46-80ce-4b93-b33e-cfd7ce3f00ef", "comment": "Malware payload (SantaStealer)", "value": "ea28b85e97fdfe77335e8625586212f0df64ceee15c8290d17b75e6096694d81", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775981353, "uuid": "f0305f80-ce31-4c69-978b-b80f9111e076", "value": "T16DC5029F31E62069F9E83330D47577B60ED2BD8A78E49E8CC694552C7E0D02D498E2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775981353, "uuid": "af8ee9c3-f37a-4f5c-b67a-4c344465b86a", "value": "f1d840d6eae17d90e2995a85b3633177", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775981353, "uuid": "3c70cc71-be8f-4c2a-b488-dde0bca28a38", "value": "49152:i795t5WNFN8llgHKWmBNzD+CnySA88RvCEOV70eM1VM6Wys:i795vWNP2lsV+f+CnW86CEOVEDjWy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775981353, "uuid": "9d6e80e7-9e33-4c98-8aea-2daa0fbfb116", "value": 2696704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775981353, "uuid": "f031f943-5949-4571-abf9-1019b83c9166", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c54cf306-2e1a-11f1-bc00-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1775981471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775981471, "uuid": "17c0cac6-49b4-4d1b-8d86-35061bf6c0a3", "comment": "Malware payload (RustyStealer)", "value": "7cc9f325316b3dabf3788c14ef2b81c4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775981471, "uuid": "d9ab1fe4-06a8-44f0-aee0-64631e94012e", "comment": "Malware payload (RustyStealer)", "value": "63e726bee554a09ad7de1f8303928850b94174a8e8828c224b9d9c54dc1b2656", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775981471, "uuid": "a05251b8-8e28-4f40-9553-c43d7dc3eb22", "value": "T1AC76CFB536187CF6EA3E4377DA666C9D13762362479794CE107072C20B43AB9FE26C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775981471, "uuid": "cd7d1480-98bc-4d32-9c46-16321ccde952", "value": "eefd3e807372dbb1c86439f17e5cdd16", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775981471, "uuid": "ab3a6c6d-a3af-4c81-8d8e-ef86d4604c70", "value": "24576:HevYUZBIvAKgCbKErHsEtvzJHtx10zDaDRrVsaoAnNAWtG1t+sGA8i+jLoQpQkOj:HevYUjIYv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775981471, "uuid": "916b784c-8694-4474-b243-2c56330ad1d2", "value": 7219785, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775981471, "uuid": "3ef5afb2-4f74-4869-9db3-2d3f8a04fcda", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e155425-ed79-11f0-8990-82aee05be84a", "comment": "Malware payload (BRAT)", "timestamp": 1775981890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775981890, "uuid": "6a143609-5079-49ee-9413-bf295493d911", "comment": "Malware payload (BRAT)", "value": "423cf5ddbe13df64594385b8fd519cc7", "object_relation": "md5", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775981890, "uuid": "1f555539-0ef8-452d-a20c-f336e168858d", "comment": "Malware payload (BRAT)", "value": "165c77e0cb3fc6551babc2de99e0c5182fb86e20ac3354da7ae980b580721049", "object_relation": "sha256", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775981890, "uuid": "5d1c9625-cfbd-47c1-8d0b-ad75b0d34050", "value": "T157867C43EC9159E9C1A9A33089A79253BB71BC481B3223D72B90F7392F76BD06E753", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775981890, "uuid": "dd4758e9-77d2-4765-ab34-7f51f96da1d8", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775981890, "uuid": "590c1b0d-e49e-438b-834c-ed6d594e6d03", "value": "98304:G3T2h9PPeJzgg3ty1qOMGUjEBoSMeduU8gsHZVY/YK2:GjigJMg3E1qrQFM/U8gsHCYX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775981890, "uuid": "3e858ab2-12ad-4a2d-acf0-248fa7461233", "value": 8346112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775981890, "uuid": "cde21ebb-e6e7-4d3a-8bd8-861bf7e63c15", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff55127f-3648-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775982257, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775982257, "uuid": "c4b03d32-e2d2-46a2-9ca6-3d03e44c6aae", "comment": "Malware payload", "value": "ada2ffcab91c4e755b3f8e72388d576f", "object_relation": "md5", "Tag": [ { "name": "pw-update", "colour": "#10debc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775982257, "uuid": "02d0bdeb-a0e2-440c-9428-275dcbb2d171", "comment": "Malware payload", "value": "1178729b61353fcbfb453b3a13638426d5372fd6d6a5de31f53869ace19c8668", "object_relation": "sha256", "Tag": [ { "name": "pw-update", "colour": "#10debc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775982257, "uuid": "e63cfff4-42d7-4727-a7b3-dd5bdd2b3b2f", "value": "T103A733B6D70C830BDCD4C7CA623B854C916C6F6BC697493B8BA0F4ECAE29EA5515D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775982257, "uuid": "bdc2848f-b9cc-40f2-b058-62eac98561ac", "value": "786432:Zh4NFiolgVG+x2Cejtm5epqfhfMeUXIbcKygJAs4s5rlTn8yvCsCddYVRBAlsazz:ZuNlgVG+xhej4PyX7KBJAsHrlTn8yqsY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775982257, "uuid": "041dc1e4-dbb7-4968-860f-e22db3ea6714", "value": 47858501, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775982257, "uuid": "84da4630-801b-4e30-aaea-6d240961d378", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e778e4dd-3652-11f1-bc00-82aee05be84a", "comment": "Malware payload (Ligolo)", "timestamp": 1775986512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775986512, "uuid": "5afa7cd0-add4-4226-9f3e-953a6a8c2bd8", "comment": "Malware payload (Ligolo)", "value": "338b2d1801166e7ad159f15e1ec6a3e1", "object_relation": "md5", "Tag": [ { "name": "85-192-27-231-8080", "colour": "#c535cd", "exportable": true, "hide_tag": false }, { "name": "Ligolo", "colour": "#BDEABC", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775986512, "uuid": "f844decc-0526-4e07-9d47-fba157854f9b", "comment": "Malware payload (Ligolo)", "value": "b601d17b3a0f8d870965dd825145a2c90d85b8f4ff6a713f2fc0ea28d093660a", "object_relation": "sha256", "Tag": [ { "name": "85-192-27-231-8080", "colour": "#c535cd", "exportable": true, "hide_tag": false }, { "name": "Ligolo", "colour": "#BDEABC", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775986512, "uuid": "92defa2e-6090-44d3-accd-6c81cb745afa", "value": "T14EB67C03FC5619E9C1AD963189B396137B717C480B2223E76B90F2387E76BD06EB97", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775986512, "uuid": "e5194dd6-0026-48a5-802c-e679263d02b7", "value": "ed8b780a3ce7ca4aba78a21f6bc3d4e0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775986512, "uuid": "5b0cb0d1-b4cf-4b70-b281-034bd83e2376", "value": "98304:aL5HKGpkM3tq5jOjTlwle0vj37ZP2Kywx+WEpwTvhpEJQyc/+MQGRPnaXL4QyRaQ:ap9pky3mlpASTvMJXc/Jv/aXLiweT3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775986512, "uuid": "52163a83-92ce-45da-842d-96c5485cea6c", "value": 10944000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775986512, "uuid": "133a432f-4f05-4f23-ad98-f02a2afa3422", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f40efb0-100d-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775987422, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775987422, "uuid": "5db6cdbb-7c63-423c-8060-7f62ce487c96", "comment": "Malware payload (Gafgyt)", "value": "3414f8a7f3468845241bce5250883b16", "object_relation": "md5", "Tag": [ { "name": "45-66-228-93", "colour": "#3610ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775987422, "uuid": "7e1d3b9d-edfe-459e-8b0d-56b2423a2c03", "comment": "Malware payload (Gafgyt)", "value": "42c305a25b61d95365a8e28f42aff6512fb12158d46310a92d8c846df164dacb", "object_relation": "sha256", "Tag": [ { "name": "45-66-228-93", "colour": "#3610ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775987422, "uuid": "fddd6e2e-6fd0-4d51-a0e1-7cf601c5af97", "value": "T105666BC9BC1D6462D5CAB7752F2312D93639BC088F42C7232614BF7DAAB23598F136", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775987422, "uuid": "b122d815-97c4-4633-802a-28434a4ed4a4", "value": "98304:JiXm443RvrhmHtGpZpPf+DH66S3TUUSrpBztEV:Jkm443RvrhwK1QBrpZ+V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775987422, "uuid": "08a49ce8-89a9-4d43-b669-a706b115316a", "value": 6815892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775987422, "uuid": "57c5921f-21df-479b-a2a4-d729e98c167c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1cf9965-0334-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1775987422, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775987422, "uuid": "fb161a7f-b3ad-41e8-9908-68715323a1dc", "comment": "Malware payload", "value": "d67d6c6a1aff159fdecc34301f37cbff", "object_relation": "md5", "Tag": [ { "name": "45-66-228-93", "colour": "#3610ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775987422, "uuid": "51bea478-aafd-463f-9812-15a940b9d182", "comment": "Malware payload", "value": "2cbb6e278e9e92642e2fa2e2c0d191571e10cdd38a2a303cc7bc21448dd03927", "object_relation": "sha256", "Tag": [ { "name": "45-66-228-93", "colour": "#3610ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775987422, "uuid": "7527880e-78a9-4805-bab6-31ceb4f9b0fd", "value": "T1888629D27F98EE9FD29433354EA6C23873E53D00C1B010379616FB192EBA2A49957D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775987422, "uuid": "31a115ca-50c2-4d3a-92be-50ccb62ad87f", "value": "49152:Dp8hs8vDlxbwhm2Wr3LQt7VGg0EcKE5r7KAnosrlYHnYZSaQnEtBANHHP5EQ:Dp8hxKp7VGrmWztBANnBEQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775987422, "uuid": "cdc16a80-be15-4216-9291-83ab0eff0fb1", "value": 7864468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775987422, "uuid": "3e7c0188-de6d-4b64-b359-b85d63b884cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6bcd22b2-3656-11f1-bc00-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1775988022, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988022, "uuid": "6b171deb-d46a-4c90-bf00-5b40cbcf6b7e", "comment": "Malware payload (CoinMiner)", "value": "462f8edfe45ec7199c5e440720ad9f09", "object_relation": "md5", "Tag": [ { "name": "77-110-125-145", "colour": "#9b583d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988022, "uuid": "7f61c7be-20df-4938-9a02-b3311773c077", "comment": "Malware payload (CoinMiner)", "value": "025d683b3ebcfc6ffd60c825d2ea6b94f337e9af9c2ba0d6cbc59277246bbe05", "object_relation": "sha256", "Tag": [ { "name": "77-110-125-145", "colour": "#9b583d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988022, "uuid": "eefab7d2-2bd3-47fd-b211-aa4b22993181", "value": "T1F213E9E5FCA9D93031355638BACDD401FB670A37055A3104719EAC187F3C799E1AAE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988022, "uuid": "d8b5e006-5b69-4404-ab75-624686d58b36", "value": "384:waRKQ0VXvoQ2itS7s3RWA0m+EwvE4qN0MH8ns1irDy07Srgb6zakqpxYAVAD:waMQoio334qf8ns10DCx9Ky", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775988022, "uuid": "034440db-5f59-4741-8eaa-fc09f9e78560", "value": 45306, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988022, "uuid": "d4691463-c2a2-460d-8c4e-655ae96e8623", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "896d8820-3656-11f1-bc00-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1775988072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988072, "uuid": "3a24f8a3-747f-4c0e-810c-58f744c8c88f", "comment": "Malware payload (CoinMiner)", "value": "a07ae9cb4d29460e13fea3eea1885a5e", "object_relation": "md5", "Tag": [ { "name": "77-110-125-145", "colour": "#9b583d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988072, "uuid": "9f651178-8147-4b41-9bd2-5a22dd74c386", "comment": "Malware payload (CoinMiner)", "value": "44d2e656cd3641bc336724fef0692528b309a189fb5ab18861d0d498e5164437", "object_relation": "sha256", "Tag": [ { "name": "77-110-125-145", "colour": "#9b583d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988072, "uuid": "a72087e5-61e6-4146-8da9-61d814c693d9", "value": "T1ED13E9E5FCA9D93031355638BACDD401FB670A37055A3104719EAC187F3C799E1AAE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988072, "uuid": "5172b00d-cd08-4539-9c4b-536ee163b5a5", "value": "384:1aRKQ0VXvoQ2itS7s3RWA0m+EwvE4qN0MH8ns1irDy07Srgb6zakqpxYAVAD:1aMQoio334qf8ns10DCx9Ky", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775988072, "uuid": "69186bab-8c78-4402-a275-85ef79f385af", "value": 45302, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988072, "uuid": "d0fe5516-6474-4e67-9337-ce764a266cb2", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcec370c-3656-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775988266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988266, "uuid": "b0eafe15-3e41-41ba-9a72-63cbeba8b715", "comment": "Malware payload (Mirai)", "value": "4688b4346b22306e593000765cf3c479", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988266, "uuid": "010f545d-c06b-4e2d-a0c8-bb9a40fb279f", "comment": "Malware payload (Mirai)", "value": "d80bcc8a926440f4033946f46680ddaea8e1bd9e4cbd64732bc94a84845c8e73", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988266, "uuid": "db8797e5-dae9-4e2b-9625-a2c6d580580f", "value": "T109B56C43E683C0F1EA1206B11117E7779A359A1A0136C9A3EF98ED35AE71742E71E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988266, "uuid": "6011cd41-0970-4d15-80b0-f9311a726bf3", "value": "49152:FwYF2CGciLc3fSLjQ45hzf9Q/k6cb1p6kV+9:J26i7J5xndp6h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775988266, "uuid": "bc4ade08-c81d-4020-8163-a22a3c5d520e", "value": 2411388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988266, "uuid": "dd770a34-b7e6-45a5-9038-7db6bd735a63", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5841e781-3657-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775988419, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988419, "uuid": "3673f2de-141d-448a-8bec-6daad74e10c5", "comment": "Malware payload (Mirai)", "value": "19c3457a5803f3b1b8bb2cb68fd120db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988419, "uuid": "80c0d3d4-ac91-4e29-b555-dc1e66b96287", "comment": "Malware payload (Mirai)", "value": "ffe12ef5b7c080234d6d5d46f0cfca724faddf648e9c7615512a13f2bac2d471", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988419, "uuid": "4bc52e16-8699-44c2-83c5-5a2fa345e99a", "value": "T1CFB56C47BB08B9BEF246733784574A0E34047F12C0815F23A2B5F5AD5E7A1A91F396", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988419, "uuid": "bdd3e4f2-0da3-4c7f-92eb-4435904f689f", "value": "49152:H6wXN2WD8Xu2Fp6r0oFNH0ZzqvvZbhrBk0w:H6wXN2O/govdvvbBk0w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775988419, "uuid": "9bebc143-952d-46cb-8dc5-22291b8b3253", "value": 2322044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988419, "uuid": "98494620-fe9e-4d91-a4d9-666da6e8e6c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2ff8338-3657-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775988571, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988571, "uuid": "0307d7a1-2dd1-4fba-a7c8-747282b7dece", "comment": "Malware payload (Mirai)", "value": "39aa8911159b31c26cb36ec4b11362de", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988571, "uuid": "e7d6c539-f731-4ec4-b8ae-4ed2b4f9c5f3", "comment": "Malware payload (Mirai)", "value": "3ec9e137ab496ec7c9e3850d4affef1e35caef2841ba879dc9041fea712bcff0", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988571, "uuid": "e583a734-21ab-4c97-9be5-9014b7945498", "value": "T102B31CCABC818B11D5C656BAFE0E61CD33134B78E3EE7113CE185B2D674A86B0A3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988571, "uuid": "2bb1b363-1e8a-49d9-9c96-5ff30ba8f247", "value": "3072:4j2WN7Edp8fG9EbXf5UxZuset/25TZXU4t/PnqmoKC6In4:c9flRUxZuset/YXb/Pqmvn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775988571, "uuid": "d8ee0886-9e3d-4830-9d4c-20c72a282f95", "value": 107900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988571, "uuid": "c8c1ba29-8771-4b5a-af8b-8a499d356149", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4811f6ea-3658-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775988821, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988821, "uuid": "dd3853d6-f661-464a-b556-bee49100b65b", "comment": "Malware payload (Mirai)", "value": "5106b95e4021431db75eff0a9484ee9c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988821, "uuid": "de73efce-0e3d-4cac-8696-f390b011b74f", "comment": "Malware payload (Mirai)", "value": "7ccd8cc0373fdcd489db2db9aeedd1bc4f4033d2a7f0a68f7f848bef8ba45643", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988821, "uuid": "c23f0179-7207-4ac2-a4e1-c74f76d145b1", "value": "T16FC55B55FC509A56C6E096BAFB5D828C33232BB8C3DF70179D0487743BDA9AA0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988821, "uuid": "6d0a3b8f-2cbb-435c-8415-6cafded92b21", "value": "49152:O9rRDHOWNZEqUyLqw5UO7tI8wIO4k/zyZWvPla:O9pHO8EbcqwpXwIVZWla", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775988821, "uuid": "4380fe54-1ce9-4453-8b90-101c6f8661f7", "value": 2498452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988821, "uuid": "dab21cc4-d1c0-40b6-a0d9-20324bdbd639", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ff6777b-3658-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775988915, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988915, "uuid": "7263bb5c-a445-4922-874e-534f3c30d8ea", "comment": "Malware payload", "value": "04ebe293e37f982296cb3b6a3c1b7c78", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988915, "uuid": "cfafcc8b-6198-4231-a167-08156b10824e", "comment": "Malware payload", "value": "294472a2ad54fa15b1724e8d60200c8202b3098bbde3bd5aa3db91ecbf4a20df", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988915, "uuid": "5e8ed6fc-1334-498d-8ac8-45af98eedfa6", "value": "T1A7C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988915, "uuid": "faf567d5-3fc2-4ce8-8707-15296a670845", "value": "12288:r+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byyH9I1P0QKw6FEw:r+QqldA/TSO713u7xnyH9IaQKHZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775988915, "uuid": "8fe7c19c-8a13-401c-8ae5-c95c1714c370", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988915, "uuid": "b81cbd08-796f-4f6a-be60-db4fdaee1354", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "800a5436-3658-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775988915, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988915, "uuid": "150b6f40-f36a-4ffc-bd13-a253894ffd7c", "comment": "Malware payload", "value": "7d5dec5214f8c3100060d2cec446ca9e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988915, "uuid": "066ef04f-482b-4eb4-92a7-072d94b92f78", "comment": "Malware payload", "value": "496b9d3a0151a78c87d43bf5c52a98821343bfba1f5d9e48762de0c92eb0215d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988915, "uuid": "cde31e44-2a9e-48e9-9a9c-d75975109a11", "value": "T1EDC4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988915, "uuid": "eafb26db-d45f-4712-9918-6c205e4b9eab", "value": "12288:3+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2bybH9I1P0QKw6FEj:3+QqldA/TSO713u7xnbH9IaQKHS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775988915, "uuid": "3503e850-c1b8-4c3a-9e61-0d126cabe7db", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988915, "uuid": "3bf27b7a-85d5-4da4-9a8e-6823bd24e45d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "803eac64-3658-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775988916, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988916, "uuid": "321b70e2-a5bf-4cfb-a807-2d7313a46ea4", "comment": "Malware payload", "value": "fac0ae0c66f04462373666f31ffff39f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988916, "uuid": "38e0a17e-9f3c-49de-8735-14fb2395f862", "comment": "Malware payload", "value": "9e010299e71df2d172d490017b5731ac4bea22e90cdec84537618f7859fffc71", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988916, "uuid": "ad60291f-e165-4aff-adae-72ca4f798078", "value": "T1A5C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988916, "uuid": "4ba90d84-7873-4d16-a2d6-11100da7ed4d", "value": "12288:3+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byTH9I1P0QKw6FEL:3+QqldA/TSO713u7xnTH9IaQKHa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775988916, "uuid": "d4a242a6-e52c-422b-a644-2f0f5eb5267f", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988916, "uuid": "af140b76-016f-4fa5-9066-037442cd5ec9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29fda55b-3659-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775989200, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775989200, "uuid": "1c3d0732-9a99-4aef-baae-6ba9ba9772f3", "comment": "Malware payload (Mirai)", "value": "650fbed4380212398f7b77aeb0e7aeee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775989200, "uuid": "df94b2e6-9204-4a5a-9cd2-3d4d2f1f2691", "comment": "Malware payload (Mirai)", "value": "a6c9da2cdb69b12da6df6b0997f48d089935a08410015e601cfa08880f401907", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775989200, "uuid": "528ea583-209f-43ad-9059-b6e9fcfbbe97", "value": "T1D8E5E81B5A319F6CF7B487344FF34B34E76A22D617A1D980E1ECD1085E6424E681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775989200, "uuid": "f8238fa4-b7e3-4d9f-84b8-b4daff8a54ca", "value": "24576:rPG+N2SAoriyPr1qXOmn5honYVKXupHm5Lz/ga6o/qTsu7n+XI7Xeq/6G5H3UQZW:K+NP+hbk/5Lz/PqTsmsIUcPvPSU8v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775989200, "uuid": "1e8f5d38-2496-4e23-9b79-14fdc7901ca9", "value": 3168500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775989200, "uuid": "2d5a9ce4-48f0-46c7-ad96-3b4a9da12557", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a9d550e-3659-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775989228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775989228, "uuid": "c14dbfb8-6e58-4e5e-951c-cac7abc386d7", "comment": "Malware payload", "value": "df070a1336c27c5aa19bb7bdaa593a5c", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775989228, "uuid": "f545f596-b7a9-4d98-99b3-5c0dfb5a585e", "comment": "Malware payload", "value": "461e5ad26afedd6a3ad58f3e397dd6b5c0970f153ad173a9bc639f594883e29f", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775989228, "uuid": "244f9be8-54c0-4050-a9cb-48322ea25ad0", "value": "T1F703A55EC177029E340BD4F53BA1678732D0612FE749E82CBFECE5104F46DAA9692B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775989228, "uuid": "6c7a290c-6531-4773-bc74-8bd49ec7a418", "value": "768:oSrFlF3ZJFEF3WMZ2m2rIl7HICc6Iaut2:t3N2kG2m2s1HvIaut2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775989228, "uuid": "daf538f8-a219-49b7-b94a-c2f38dc8713c", "value": 39919, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775989228, "uuid": "9292c941-6594-4112-a9f0-cf544d17b6b5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d25034cf-365a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775989912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775989912, "uuid": "19b67839-c30f-4ec7-b06c-ca4058752a70", "comment": "Malware payload (Mirai)", "value": "03cd28bdeffe587b6f77d1f40e3ddb9d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775989912, "uuid": "a71a10d6-ded7-4ab8-b4f3-0da61da088f1", "comment": "Malware payload (Mirai)", "value": "a4172970113918ec7065c7528a4df3e419f777bbbe09a9478f020ffa74282acf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775989912, "uuid": "534236c8-9b16-472c-8638-79385387a91e", "value": "T1E5B55B41FC51AA56C6E066BAFB7E828C33272BB9C3EE30174D044B74779A95A0E3F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775989912, "uuid": "2ee8aee3-09e8-4e65-a315-17404af7e821", "value": "24576:8cC+m+4zTbTl7NCd7o9dIShLbDG2GLEnPBDihI2CbHgp8M+frcRN+Bmp6loupWvW:8cCl4oHIuLdfPByx8LfobupWvPle", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775989912, "uuid": "2292243e-e83a-41b3-b162-320f573e6702", "value": 2491548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775989912, "uuid": "335edf2a-39e5-4807-b549-1e1d8d6846d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7b6becf-365b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775990297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990297, "uuid": "fc63dc58-3520-4537-b6dd-a1bc2677e14a", "comment": "Malware payload (Mirai)", "value": "2c3d0a9a9a0f08920c57527e36de9539", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990297, "uuid": "86848f33-2e14-4d89-8cd2-a4e505c7a198", "comment": "Malware payload (Mirai)", "value": "73f5a00310a77473eb3ea14fd5a3ded7fc3262e31aeb73e74ef69788fd913c35", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990297, "uuid": "3f49d729-5afc-4d04-af7d-3270128b5562", "value": "T1D2E56D62ABC7DCAFF7A9037516F389B4B3E8A05331758DA1C36B76061F251A4490DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990297, "uuid": "690cd67e-30f3-43ef-952b-c610ca439902", "value": "24576:tU6sNdHpqZl5mNm+9pSkXfp2UDRjY4d5pT6buoDSup3AVnn0mqYzIvAJPPAyqp/+:NwpqZl5mNmM20h2Sup3RuzPJPPAB/W7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775990297, "uuid": "de35c7fd-a56a-42f3-be45-3b9555d5a0e6", "value": 3081864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990297, "uuid": "9818c827-fad0-4010-8594-13c27e5dc647", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0175e4e2-365c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775990421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990421, "uuid": "8f288b1d-cc60-4e3b-8ad6-1f2b96db1a62", "comment": "Malware payload (Mirai)", "value": "6fd11c02cd93c2c2482fa3c0a27574b2", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990421, "uuid": "7df1c50a-53c9-4d4c-83d5-dfc562c805da", "comment": "Malware payload (Mirai)", "value": "1e358f3e45faae686ff08398cbeef9425c96d4e0f7f7ca06d7a6649a70e07d04", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990421, "uuid": "fc290ee2-09ee-48ac-a739-afa1ea7a8fec", "value": "T169C31ACABC858F10D5D665BAFE0E618D33134B78E3FA7103DE149B29278AC5B0A3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990421, "uuid": "116e3802-4aec-4f46-b346-5feaeaa336ab", "value": "3072:mI2wShxZcG8aE6gfXVp/43VLJpppxDixDslxW68oFAlmjg2NF51n4:fGrUVp/43VLJpBD6s3W68oalUgUF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775990421, "uuid": "ecc846f1-44b6-483a-897e-c750278313fb", "value": 120356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990421, "uuid": "683108eb-f81d-4d18-9cbf-ad5b7176df75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88cf807c-365c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775990648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990648, "uuid": "3ca4f3f9-1745-4c75-94b8-05edd15c1a0c", "comment": "Malware payload (Mirai)", "value": "6a68cd39908891f79faf82848f93f936", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990648, "uuid": "ae15bdbc-d54e-4224-8561-99b10bc92bd4", "comment": "Malware payload (Mirai)", "value": "616922376e145bacf6ca2e972869be9aed61674aa19462cb0d26150a4bd4dd03", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990648, "uuid": "f5700327-ef2b-40b5-b9e5-eab2742ccde1", "value": "T1FAB56D99EE0E3D42E3C7E27CDF4A8BB0313B76A8E32281B37952415CC0DA9D5D6B12", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990648, "uuid": "cb925ac4-3e23-4514-8406-585524a023a9", "value": "24576:+zYo1AC9ZPau5VTlf7nH98hCTqNr8D++7QzDszC9wP+0imkDds6hJWCVVCI4i3du:0+qPlU54gdZzEahjat4yPc07PX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775990648, "uuid": "fff478a9-b623-403f-978c-4e0bc5ddfae0", "value": 2489264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990648, "uuid": "b4b420bd-0d22-41f1-bb9c-0c30321d39aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed69e4e6-365c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775990817, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990817, "uuid": "060c452e-6f78-4cec-88ed-fab1a2e7da55", "comment": "Malware payload (Mirai)", "value": "352dd53ef2a3bc7f4b0aae75224b08c7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990817, "uuid": "79eea16e-0039-4793-9a4a-1ea806ab220f", "comment": "Malware payload (Mirai)", "value": "ab02befc1a358b5dea125988bf4a9280cccde9d9826548fda5e1558171debb9e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990817, "uuid": "8adf1375-3ba1-49f9-bae9-1f6edbbb34ff", "value": "T172C59D629968BFEFC526D171A538CEF60B53680052260FF63996E3B44943AC2F3067", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990817, "uuid": "bc761c62-7a3f-4e30-9508-f26ffc49ee38", "value": "49152:CuFv82BeAuzN/GVdxRlfi+N/m8Kx+ZAhAlg+0RwIu1jpVpmvPse:CjCd/mZulpmse", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775990817, "uuid": "0ed37b87-fd09-457f-8a07-c3f98496b838", "value": 2694952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990817, "uuid": "83097837-206d-4c32-86ea-809b93c47b50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ca668aa-365d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775990977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990977, "uuid": "6cb311ec-6cd2-4267-8f08-507efd867501", "comment": "Malware payload (Mirai)", "value": "f1fcf4a4b7a84e55697f03ee7781f37e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990977, "uuid": "094718b7-996b-4c36-b8a7-4a8eec0f2da4", "comment": "Malware payload (Mirai)", "value": "459af02f0f41c767a4835138ff12243f3b8fec3dc7f0daaec6ba5966d2573d59", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990977, "uuid": "b1aa6ea6-68a2-451f-a595-b13799f31bbd", "value": "T1F9D55B41EC509A13C1D15BBAFA7F82C933332BB4D3DB70164D18AB706B96B5E0E3A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990977, "uuid": "7108ab39-8a4d-460c-b479-5828bcd03be8", "value": "49152:BMYRhCelUldZoz9wl3jYEOSZWvPla1vMyqKya82xyPgAKR03:BMYi9Z+OkEFZWla1UyqKya82QPFKR03", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775990977, "uuid": "8d91ca46-136a-4f47-82a3-29febf8fc752", "value": 3017121, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990977, "uuid": "1a2735a1-cd1f-473e-b4a2-7ae9f7700ab4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b587d0a1-365d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775991153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775991153, "uuid": "0ee9290a-78eb-4523-a6f5-0244c400ef16", "comment": "Malware payload", "value": "284c8dbd8272ba14686df2baac9dbd28", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775991153, "uuid": "7f27f89b-8c99-4dd6-91ce-791a0852fbc3", "comment": "Malware payload", "value": "132053daa6208ae139b73fc50c13ae307048562487a906fa78239e029d7506dc", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775991153, "uuid": "12439deb-4796-4e26-b7cd-4827237d8aa6", "value": "T1DBF2965EC177028C340BD4753BA1778732A03167E649E82DBFCDE5140F46EA9DAA2F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775991153, "uuid": "69bbc128-9e49-4a2f-ad58-656b9e8c3cfd", "value": "384:obug1rCczFlFB4qZheCkcFEFB4qWMZ2m2rTbHhCcLjIJSHgY74t2:oPrFlF3ZJFEF3WMZ2m2rTbHhCc3Iaut2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775991153, "uuid": "00e46168-d474-420c-a3da-e8f874a3f730", "value": 35091, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775991153, "uuid": "683bcbf9-fb18-49e1-be5d-cc3e460f07e9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf87fc61-365d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775991196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775991196, "uuid": "2c93ba63-2835-4921-8b26-47e92c1cae50", "comment": "Malware payload (Mirai)", "value": "f5015765de3ce9274f344f3fe86665a4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775991196, "uuid": "76348269-c1a4-4f3f-9c2d-9e3a2e1da0b4", "comment": "Malware payload (Mirai)", "value": "59989a7476e9e994a44b2e2ea9f80b38a5d40a7a61c00e0452d41d49a1c7bcb8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775991196, "uuid": "42b159b0-680b-4700-9593-3fe5ecb0f1d4", "value": "T16CC56D027B1E09C7F1A71DB0263F17E9C7AE8AD631F9F146254EA9CA1375E3012467", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775991196, "uuid": "06bf4b02-2735-4ef7-a001-84530805fce4", "value": "49152:eBqEE93V9H/CO773hTZSX8ygBBc/W5JGuXHr5HFac8ZsvPX9ws:eBqE23Vp/CO773hTZayBy/W5JGuXHr51", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775991196, "uuid": "e1f4afcf-491d-4ccb-b70b-0bdad490e288", "value": 2727564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775991196, "uuid": "3d2db0d1-8bfd-4179-9a62-280848425cc6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22e0717c-365f-11f1-bc00-82aee05be84a", "comment": "Malware payload (OffLoader)", "timestamp": 1775991766, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775991766, "uuid": "c4a29db6-0990-46d8-8d22-8f84c72e84de", "comment": "Malware payload (OffLoader)", "value": "7dd0d5682c0778af00ee90f04d24fa71", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775991766, "uuid": "8cdc0747-2e54-4116-9649-b56905109636", "comment": "Malware payload (OffLoader)", "value": "5aa4c74072268c557ccda8c8836e3a1cee1f27af82ac86d4eab257a9e05aefe6", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775991766, "uuid": "c1cbcab3-f6b6-4e1f-8ba4-267cd9da85b5", "value": "T1B9E60223B28A633EE46E163755B2D230593B6E21A51F8C4696E40C4FFF2E0601E7F6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775991766, "uuid": "d5352631-1437-4428-9db2-e6d64bd1e6af", "value": "ac4ded70f85ef621e5f8917b250855be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775991766, "uuid": "f9e745f5-74f5-4785-8a53-c63c456e89a8", "value": "98304:nN66MIMaQcn+emUVkOBVvPD7wuH59TeDz6bRdkgguvqP6N1:fMIMZi+emPGVHDrbTLRnNbP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775991766, "uuid": "1c9d6619-cdd5-4aef-bb37-c93a969c85d1", "value": 14040810, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775991766, "uuid": "eb3b9c0c-6c46-4671-a555-612cab5dce6e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "530b544a-365f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775991846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775991846, "uuid": "fbba2b74-1395-4a4d-b59f-173fd683af84", "comment": "Malware payload", "value": "69329f154b2dc21d221add8921e5a0f0", "object_relation": "md5", "Tag": [ { "name": "193-233-89-32", "colour": "#6d4545", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "pl-avgkrbw-com", "colour": "#5b2d3f", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775991846, "uuid": "68ad107f-183f-42cd-a40d-ddf0218de607", "comment": "Malware payload", "value": "38530ff8297aad43ec0b29daeb8dd054c7f0e02790260b1925a9244f98a1814b", "object_relation": "sha256", "Tag": [ { "name": "193-233-89-32", "colour": "#6d4545", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "pl-avgkrbw-com", "colour": "#5b2d3f", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775991846, "uuid": "bbeaf212-e018-4ab6-8bdd-ae44e21abcf3", "value": "T1C7647E227584D031CA9211316B7DAFB79A3DBA705FA15AD773C4493ECA202D29632F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775991846, "uuid": "3f9f9c0a-fd58-4990-a288-2cda817e55a4", "value": "e2b637c92f8975b7a0569ee52753b3c4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775991846, "uuid": "ff4a5c6c-12c4-4804-8b08-407a99bed335", "value": "6144:8EPBvUBcbwYj5W3OEV2TlsxwgFeJMSm8Ega9uxYZNMndu5geLiQXWSB2flVI6+RU:8MUfB2fb9vCjT5T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775991846, "uuid": "8abd850c-c7b0-44d6-9225-bb16a7d35759", "value": 317952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775991846, "uuid": "60174698-ce33-4696-ab4b-9f885750b2b2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8cbd291-365f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775992017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775992017, "uuid": "65476a42-63e3-4f79-9d21-38e900a4394d", "comment": "Malware payload (Mirai)", "value": "655ee508c4d8530524a536913505c5aa", "object_relation": "md5", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775992017, "uuid": "38d99132-9d71-4275-8f4d-13c8c74d543a", "comment": "Malware payload (Mirai)", "value": "a001e98ac4e732916a1f80dd8344dae7cd8da91bfa40cfdb580c15f87f109a9e", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992017, "uuid": "a0135891-fe63-4766-b9c1-d28bd9bc83a0", "value": "T16453E64178828A17C5E422FBFAAE018D372577F8D1EB3206DC216FA477858AF1C677", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992017, "uuid": "ec9c1dca-9786-4e5d-b03e-c18eb8b67c68", "value": "1536:7jxTLcgSTvoqWGpsvK+6V3whlG9Wk5stJ+yd42+oTW:7jNkavygXG9z5QJ+GbW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775992017, "uuid": "f5b770f6-0ef6-4602-9ccc-58f531473066", "value": 66364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992017, "uuid": "0d5a0a6b-a715-488b-ab90-b31135138ef0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7a8fe9f-365f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775992042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775992042, "uuid": "4a0012a8-e982-4979-84da-da587b70d3bd", "comment": "Malware payload (Mirai)", "value": "314d2324db1b11cfb5e7d8f0f71733ea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775992042, "uuid": "60b1366d-47c3-43fd-a1d9-a07cfcc58697", "comment": "Malware payload (Mirai)", "value": "c4e360abf77a95b710f50cee2b04a8e22f62a90bed7098d3b75e7707cc95e4de", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992042, "uuid": "b9d795f3-9e60-4b1e-bb72-1e0841ff7acc", "value": "T11BA32AA6B400DC7EF85BE6B380670B15B520B7A04F516F17B627FD63EE290645C2AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992042, "uuid": "d555b540-993c-428e-912a-118ccfc7315c", "value": "3072:dksfLMyNcJ+m9BBBeuBopotgASERCkVBkvAGl2qz:pfLMyNcH9tgASERZVBGf2U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775992042, "uuid": "78eb6105-057f-4233-bda7-e72a3bd6dadb", "value": 101536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992042, "uuid": "f118e4ab-1a52-4b26-b06c-6cc0e2c1f7e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8a0d651-365f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775992044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775992044, "uuid": "99ad5971-e547-479c-8357-bc5cb237b1ac", "comment": "Malware payload (Mirai)", "value": "d427475c4749da58c1f256c743d12598", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775992044, "uuid": "37726f96-dff6-495c-8104-3199bb6e1c06", "comment": "Malware payload (Mirai)", "value": "1dbcebd31dff760eef6bbff05ada830d43241121baaf6dea13a8232e8f561b52", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992044, "uuid": "68264257-6787-43c7-887b-5a346774d5d4", "value": "T1B2E52B156F900FFBD86FCD3356E94B02258DA40622D43F7AB878D914FA5B60B4AD38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992044, "uuid": "9c0d7604-ace7-4086-955e-63e85f473cda", "value": "49152:2lG2pASucy/4QXdbSC432Y2/GM4rU5lFOqlpQvPc4:+pgqPUpQc4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775992044, "uuid": "6b43726e-f5dc-4168-99c4-69d1de52ec18", "value": 3164404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992044, "uuid": "a1fbaf68-c590-4abb-9980-2717501762e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57bf52ff-3660-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775992284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775992284, "uuid": "6ae7d14b-820b-4d35-9307-769f4149b7a3", "comment": "Malware payload (Mirai)", "value": "3c579b0421fd046e90e785dc0a595881", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775992284, "uuid": "2a2b6920-59f3-40fc-b620-6f91c89f5f40", "comment": "Malware payload (Mirai)", "value": "b344344f7fdcb4a83aa25629d887589c889c115855f3212e342ac22980833047", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992284, "uuid": "fe747610-1872-4503-b359-2528959db994", "value": "T1AC41325E06997D84C08CD43A3293850DB5B44FC814AB0B97FDE509BE54BCCCE313AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992284, "uuid": "7fbbec7e-098a-41c9-ab95-affbb6aa3944", "value": "48:mPj7P8H7Pv7Pa7P97PK7P97Pu7Py7Pt7P3GPjGP8HGPvGPaGP9GPKGP9GPuGPyGg:mr7U7H7S7V7S7F7G7a7l7PGrGUGHGSGY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775992284, "uuid": "4cf00939-a631-4bd6-bdf1-0d9bda7318ca", "value": 2106, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992284, "uuid": "676f7be7-e061-4348-9b77-94f18c206c0c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9da7b8d3-3661-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775992830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775992830, "uuid": "90a43e55-b175-48eb-959a-f61a137f5a50", "comment": "Malware payload (Mirai)", "value": "de082d4c20eb814819e49bcb4cd0d846", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775992830, "uuid": "70c6f15b-6830-4677-96fd-500960f86593", "comment": "Malware payload (Mirai)", "value": "af3117c86a635d825c826206296722a99e0e4641c9e7f2a6f91dc63c992f0fab", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992830, "uuid": "80b119d8-2457-4c81-9cc2-333be95190a3", "value": "T1CEB57C03E683C4F1DA560BF4125BFB7B893699164121C963DB98F929BD72312E70A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992830, "uuid": "445cea0c-3e5e-4ab0-b299-b490c21ed400", "value": "24576:ZRiYaDTszqGAXXPG1m2GLoDmvDzA+l4stLRDyBb+ejlZZY1MXspNHRD7MaJ1pX0P:4K3oDoEDzAmKrjljve3X4cMzxppkVo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775992830, "uuid": "8bfe4e1f-16a8-4b53-b524-fe36518c6ea8", "value": 2411416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992830, "uuid": "e4c089b9-7ba4-4cbc-8289-2a8464f49f8f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e35c005-3662-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775993234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775993234, "uuid": "3530b47d-8c69-4afe-9e74-e27c5fd6da12", "comment": "Malware payload", "value": "d2fb05e68a19ff0170e1d44112837daf", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775993234, "uuid": "50e8409f-01d5-4c2e-9614-ec1f241fa9b7", "comment": "Malware payload", "value": "08a88dc7e1f869fab09303fef187c9ee38ede7d3ee38d668fd403802890e402c", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775993234, "uuid": "0d069e06-56fb-40bf-b77a-2ccf595daa56", "value": "T1ED039519957B029E3407D4F53BE1678732D0212FD789E82CBFECE1540F46EA99692F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775993234, "uuid": "5cfaa01f-f648-4da1-bdc2-d5c7dcd50b34", "value": "768:ofrFlF3ZJFEF3WMZ2m2rBGZKX4HvbzCcZIaut2:Q3N2kG2m2duKYNIaut2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775993234, "uuid": "0d717402-0025-494c-8d03-8ceaa417f406", "value": 40670, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775993234, "uuid": "7746d126-63ca-45f1-8da1-28d8ea1df389", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd58248b-3664-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775994199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994199, "uuid": "cca3f120-2d3f-4d85-857a-626b51e9363f", "comment": "Malware payload (Mirai)", "value": "25d3b7cb507311dc747654f8660c5f79", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994199, "uuid": "d2adad9f-ad46-4e5b-a08e-cef5fc5d7eb5", "comment": "Malware payload (Mirai)", "value": "1104f9fe83821e3e549c3cdd10df27018a65c70a308085bcc41f6dc02795752f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994199, "uuid": "b6b4cbbf-f765-4be0-9d7a-8671e38aacb7", "value": "T177B55B41FC51AA56C6E066BAFB7E828C33272BB9C3EE30174D044B74779A95A0E3F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994199, "uuid": "e016e76d-29f8-42fa-8ddf-0d79bc9632ff", "value": "24576:NdRGJSoDsTY37dvOu59xFuFECu2IBpDkwrJO9RSqOSPFuRoT2A8Gqo+pWvPlevL:NdE3cuLx1HpV6OwFZr+pWvPle", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775994199, "uuid": "060eb67b-4630-465b-b60e-9a881b633243", "value": 2487484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994199, "uuid": "f3774d2b-c9f9-418c-90a4-0967b284de9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d61965e4-3664-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775994214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994214, "uuid": "459f063d-e50c-4352-9fe8-ed960ef88d3f", "comment": "Malware payload (Mirai)", "value": "167a121ddb4e1eb9589c017c4e9e2c67", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994214, "uuid": "5b92eacf-b821-49f5-824c-a0c22aa4e539", "comment": "Malware payload (Mirai)", "value": "964912fadde04186fd622930f3c56dfba8a0074e7160a35aada73324b20eac48", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994214, "uuid": "77382a6c-fe76-4c50-9c6b-8bd6af0cfb8f", "value": "T115C51844EAC780F5FE470E718157F33F8B306B05C420DEAADF94AE16EA3BB1651192", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994214, "uuid": "67fb7121-ac74-4345-911c-9aa7e20d120e", "value": "49152:8Sz2v/Gx2zOU8v0kowC0v230Us2MhVH8lw5JNfKQQtpqkV1P:8Sz2v/G8zOiZ3DMNJNfKQcpqk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775994214, "uuid": "b78a80c7-c0ce-402e-918e-1b6ab030c898", "value": 2553624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994214, "uuid": "c66ceb3c-61a0-43e2-822c-218d69baa29a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f0d2ab1-3665-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775994309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994309, "uuid": "597e6283-94c7-4ff1-a72c-4fcde2ba1ef3", "comment": "Malware payload", "value": "4922a629c25e89e28d9b274a84fbc63a", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994309, "uuid": "df9c8295-f98b-451b-b859-c77bb0785cdf", "comment": "Malware payload", "value": "4ddd3b9b123a630d7519c647ad9b2a6b0c3b69eb33b0e01296f099de803c9325", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994309, "uuid": "8cb0aec7-8bf9-4af3-88c2-bbd573515474", "value": "T111C42367226F72500DFE92ED4E4156186D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994309, "uuid": "717ca8fe-72b5-46cb-8ee7-eeee2c7509c9", "value": "12288:geCEht+9qO3g/ALyYG0ZaDajTCXMO8xzDOeQake:ntgA/f0Za6TCXKBxlZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775994309, "uuid": "cd949c74-5768-4370-af5e-f0c83a0651dc", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994309, "uuid": "977627c2-7f3b-4e11-a29a-7dd9d2627c5d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "108323f7-3665-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775994312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994312, "uuid": "2d2fdf4c-8da3-49aa-b75d-ca6185406647", "comment": "Malware payload", "value": "4a312b22b3fb1656356f320043268c66", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994312, "uuid": "d05f0461-a02c-4753-b28d-86b20420b238", "comment": "Malware payload", "value": "f5434e62274799091466511242ba6d84d739e3ba3fea0e3e8f813d32f78a3a42", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994312, "uuid": "6c160c9d-b291-43dc-a0e9-422443d08606", "value": "T1D5C42367226F72500DFE92ED4E4156146D3D8E322A00A6FE65D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994312, "uuid": "9f2adfd1-1ad1-4e42-9e7f-712247bb11ac", "value": "12288:ueCEhtL9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakN:xtBA/f0Za6TCXKBxlC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775994312, "uuid": "e58a1a21-ace7-49ac-80eb-2c2b35b7af4f", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994312, "uuid": "afea150d-be31-45c8-b8ea-1cbac91b7b15", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3edd563-3665-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775994666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994666, "uuid": "c64dc827-ebbc-4f98-a983-d9c71b80a77c", "comment": "Malware payload", "value": "3fef262d3f7762b37ce3d9858e02ffc5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994666, "uuid": "e65bf5ac-3f9a-4416-b0fb-70c1bb47fcd8", "comment": "Malware payload", "value": "4590f98e204d985070d5e5057d5ca003b5be312179f88510a20b0f23110911be", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994666, "uuid": "0dadb4d0-abc9-420f-8bd6-dbf218cb424f", "value": "T1F7C42304340641D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994666, "uuid": "b9b43c26-56a3-4846-afd3-46edee7bdd0c", "value": "12288:z6wlOMWROC/FTeHo22Qm7NzofOr68mPeA924EwCJ:r4MQOC/gHozN7NzomW8pA9u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775994666, "uuid": "f6284ae0-0006-49ac-8be9-6aef27d48aa2", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994666, "uuid": "2b58cca4-d3b1-4ca7-9cac-22521a112c91", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e55cd3c4-3665-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775994669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994669, "uuid": "48c0369a-d2a1-4fbf-855b-89b425066fa9", "comment": "Malware payload", "value": "38e88120745679dc5f68b522b75df1c1", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994669, "uuid": "041e4267-2cc5-48b6-8c89-b4e3793c48c3", "comment": "Malware payload", "value": "5999b769ee533cd84a0fa11c72abdfa57d13a76cf02df1c0d9d622189e6697d1", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994669, "uuid": "8c63867f-1717-4217-ba36-7e14d6bba1bc", "value": "T13EC42304340641D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994669, "uuid": "b1f12079-2b64-4b16-bf7f-e21b0009a068", "value": "12288:L6wlOMWROC/FTeHo22Qm7NzofOr68mOeA924EwC8:z4MQOC/gHozN7NzomW8gA9D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775994669, "uuid": "a2176b08-254c-424f-9cbf-93d36d63ce4c", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994669, "uuid": "00655a52-28e6-4aca-bbda-a440f59ff483", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e584f8c6-3665-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775994669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994669, "uuid": "a4973ade-9e43-429b-90b4-54c7c7df91b9", "comment": "Malware payload", "value": "be13d91229e3babcb57f18eb511bbdce", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994669, "uuid": "1a3cd2cb-7668-4122-8fdc-2eeccafd292a", "comment": "Malware payload", "value": "9b92adf34979d535c7f26f626eb9c375d956de79c6f08458ff149421dd495f3a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994669, "uuid": "3216b4fc-8558-470d-9b98-e7e62b303432", "value": "T1E3C42304340641D5835A2B1EAEC4E6E0BEB5A0DBFA1CF940AADD7ED06DE92A177C14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994669, "uuid": "fc22ec12-9532-4e7b-bc70-469d098ffeb1", "value": "12288:j6wlOMWROC/FTeHo22Qm7NzofOr68m3eA924EwCB:b4MQOC/gHozN7NzomW8xA92", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775994669, "uuid": "4079ac32-7dff-429d-88cd-5b68fe3d2927", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994669, "uuid": "bb75b59a-7b20-4153-83d1-63eb5412a7ac", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9dd1767b-366b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775997126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997126, "uuid": "6ccf6855-d1ee-4850-a4fe-9e3c6edb55bc", "comment": "Malware payload", "value": "0a3db827eb46cdb1e535a7d5dea0c626", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997126, "uuid": "d8b9aa20-d0d7-406e-90e9-ace92955288b", "comment": "Malware payload", "value": "bf2808f1336f1f499f137d363e79a03527e17f69070ef9e0f7ae982ca1d57af0", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997126, "uuid": "7b1fcd3f-5b31-4f76-bc10-c21cf554d8a6", "value": "T17EC423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997126, "uuid": "c3c1df15-5b00-4dc6-85b8-efdb2ecbb549", "value": "12288:0A7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWxSFyorOIic/7MPU:fm6Jj6ESfUxZ91kmY/99z8QFXicTT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775997126, "uuid": "ddb56fdd-752c-47c4-8c43-5c9b8b7028c9", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997126, "uuid": "87159e44-a107-41a9-9ba6-00da0f3e422d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f0d3957-366b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775997128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997128, "uuid": "a7f0f804-6869-4da2-9ce9-d27a5d15c4d2", "comment": "Malware payload", "value": "0ff3b20993743f8282dfdd8c4ac2ab2e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997128, "uuid": "6a60ca72-1440-4d25-8ec9-c6fc582de31d", "comment": "Malware payload", "value": "4121e393351f6623c5358b65216682e4b3f838ce94528931baa25f69132fa12e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997128, "uuid": "6548475f-e34f-4f7f-8c14-eeee8b637167", "value": "T108C423792755F0C46206F2FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997128, "uuid": "0c2cd5c1-5fdd-4c24-a678-6f4be189b5ca", "value": "12288:gA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWbSFyorOIic/7MPC:Lm6Jj6ESfUxZ91kmY/99z8WFXicTN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775997128, "uuid": "15e74a58-7f02-4149-b361-e103c8ecc786", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997128, "uuid": "82193f31-364e-4968-b5e4-2c837d65488c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d30c82a-366c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775997366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997366, "uuid": "68d59975-6b39-4e6f-a29d-72438978ad1e", "comment": "Malware payload", "value": "383a430264126f1f3cd37f91a39211c6", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997366, "uuid": "40784b23-7a60-4615-80ea-a44876e9c356", "comment": "Malware payload", "value": "1f0dc3c8fe6b22ba4edc5d4ba2230b7b14d75e94e2aff2c24c18b4c8a4ff6a70", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997366, "uuid": "f8668970-a6fd-4d71-9d22-10fbd7875dba", "value": "T14EB423F193429E0B23A4DAB457A3DB3375CE7292769D9301CA06CA9F4C7072896DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997366, "uuid": "09124bc1-1059-4166-a9a5-dbce0dec7083", "value": "12288:Kkmht7DrvdyiiCCH1oHF9nJ/qjuydgoJrrzTPwkM:KkmHzMnH1ELnKdgoJnn4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775997366, "uuid": "a486fe27-7290-4eb7-8ee1-9a2fc87c9d73", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997366, "uuid": "3f67cf56-1078-4c67-ada2-05c55ce07368", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d4c3812-366c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775997366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997366, "uuid": "ce848628-dfd3-4d24-843b-97ccbcc77f0d", "comment": "Malware payload", "value": "960256e0783b93dd25dc733066298d52", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997366, "uuid": "4ad29dd1-a7e9-45e1-b051-ad16ccfa332d", "comment": "Malware payload", "value": "677b060d0597ca7a017b6759769fdb629ba4e33b95e7c3354eda664c989b2e8b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997366, "uuid": "acafc670-88c1-4544-adb4-0325cdac9312", "value": "T194B42369227F71900C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997366, "uuid": "45e10869-4239-4d40-bf46-e43b96430452", "value": "12288:27JZAaFpeBqO3g/ALyYG0ZaDajTCXMO8xzDOe3Wc:OLpeRA/f0Za6TCXKBxmc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775997366, "uuid": "b32eec9c-0bea-4f6e-acbd-98899015bcfc", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997366, "uuid": "1a7f4c75-6e32-4169-b301-52924c4a1653", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2db8a5a5-366c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775997367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997367, "uuid": "049f3968-b211-4df7-b3e8-11e7d7cf14a5", "comment": "Malware payload", "value": "e32a68849e939a4df85b508c491ff039", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997367, "uuid": "632364f4-ef0b-4dc8-a34e-d01024b28d95", "comment": "Malware payload", "value": "4f9011b1ecebf7c586e1145c8cb039db21e5ae5fd97e801c292e7e7f0aaefac7", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997367, "uuid": "ad844326-f682-4cfd-9d28-54e6be906caf", "value": "T1D6B42369227F71900C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997367, "uuid": "e9e1c986-5d92-417a-88a2-7ded35ca4e18", "value": "12288:O7JZAaFpeZqO3g/ALyYG0ZaDajTCXMO8xzDOe3W8:WLpe5A/f0Za6TCXKBxm8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775997367, "uuid": "3ad2d77d-afcc-4402-b356-35da8aa5eefe", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997367, "uuid": "832f3d11-b581-4d47-84b1-43ca54c37cb1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e9a963d-366c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775997369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997369, "uuid": "c2a8d883-5e86-4919-b119-74b9345751d3", "comment": "Malware payload", "value": "34093e0ef9a90511a0dc6c5bdde8e532", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997369, "uuid": "62b80be4-ed60-46a6-ae04-fa319bfbf21d", "comment": "Malware payload", "value": "29f831b70617e767d6b83580cba5ee1d227090bf3718f74508fe68a03fca3ce3", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997369, "uuid": "8fa42839-15e1-44c4-bb89-e48bf63b51c8", "value": "T166B423F193429E0B23A4DAB457A3DB3375CE7292769D9301CA06CA9F4C7072886DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997369, "uuid": "60d17248-9ea4-4aad-b913-a9e34daea4c0", "value": "12288:+kmht7DrvdyiGCCH1oHF9nJ/qjuyhgoJrrzTPwkY:+kmHzM7H1ELnKhgoJnnM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775997369, "uuid": "2e88fc70-943a-4714-a154-129b814e8011", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997369, "uuid": "609982df-5c4d-453d-8bc1-aadaaa4b53ff", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3e6cf67-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775998451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "88fcee9b-8e53-4ac1-9faf-96cfb3b78682", "comment": "Malware payload (Gafgyt)", "value": "da82ad47ea7588111389ced6c17df738", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "e5314f73-4aab-4fe2-bd93-05a76f9fce10", "comment": "Malware payload (Gafgyt)", "value": "2ed46896bcf48ea047471359a941f17bbb668a2dd68dbcbf6e59989de21fc02a", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "6ba76f6b-0e64-4168-8bf7-fce981d1f092", "value": "T187D3126E84C36B9DE1450B68DF4FC84F5E0653B4F7F1263B90D3426A66CAE24135A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "db00d0cb-d72e-4985-804f-db6708ce04f6", "value": "3072:V3+UsdnLgkJj4FECORNwLl1r2s6cCLQs4vcRepsJfoaDW:rsBTJjGECOcn2s6jLQsyczdq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998451, "uuid": "8e098132-3481-4a5c-88a8-a63de972c65f", "value": 132468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "a2afa3d0-df5a-45a9-81cd-29b185d98211", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3e7871f-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775998451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "412d5169-9515-4305-82a7-1a8e5fb8fb8b", "comment": "Malware payload (Gafgyt)", "value": "02268bc0dfea9802a52033fd274bcfa5", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "0780f9a6-b175-45c4-9718-29875360afd8", "comment": "Malware payload (Gafgyt)", "value": "6b18fd6b8c8fb20954da96b7a6daf2534069f4d22f441ecedf0296819e4c0a9a", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "029684d3-073a-4109-904f-d3512aea41aa", "value": "T1C0A3120D9B05E493F1C364E547C60EB933018AB6A1D3F0D7ABD05CA9654B3E76BD86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "f87c5f37-7d26-4b6e-94d1-1a389253b1a8", "value": "3072:p4IgazrE1xmzSaN0P7zWYwOa3HXDhS7EkE2rdD8VTCtyYg0o:p4IgSmxI/YwOaXXDR52rtMet6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998451, "uuid": "d6df81b9-a3bc-4b91-b1d8-d4abeddc02a2", "value": 105840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "ebda9655-5612-48d5-ab8d-1bfc68ec5b73", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3e8e326-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775998451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "7f4632be-f9ba-4b45-99ab-9b0c6282f2ac", "comment": "Malware payload", "value": "d9b14fd0344cb73513b46b7709eb2dc0", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "d2acafa8-1a19-49d6-8d57-1bea432e79c2", "comment": "Malware payload", "value": "d1cac3f9cad8beb8ed01324c363dd4b8e406c13798ee16f80443b7078865d5fc", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "0947b520-b991-4842-8da8-898705108ef3", "value": "T176C312685B4EE099E38803B555C7C6CC77693623ACC485DC87E0ADC2732480EE7BAB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "79a92b76-b92b-44f5-961b-15c334240537", "value": "3072:B+8wlJnS+ZPcvz7fh/zEBh8E9CaIszRHB3XVp6Urk0KGp/KIKVMxa:B+xZPQz7fdwBh8EnI6H5XVEgBKwKIKn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998451, "uuid": "5d6e7d1c-26e2-4cd3-873d-ca2cfe61be1f", "value": 125600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "dc78fbdb-2f86-4694-9d93-d4c625464cc2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3e9196f-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775998451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "4e0ea333-fcf7-4b30-b2e5-25c7f0b99dd2", "comment": "Malware payload (Gafgyt)", "value": "994130096b31e34916fbfc8347e49098", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "f2b7620c-32ea-47fb-a47f-895f0ae4e3c2", "comment": "Malware payload (Gafgyt)", "value": "e5ad2b9e92e3b44793d50383ffa145126a3132dbf65b8324183d901f689def77", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "44bb1c03-f2ea-4782-96ed-3ec503d91386", "value": "T188D31215EAC1A3CFB72590B36DC9930EA6010FACB2ACF51461266E6C029CF16795FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "6510e202-00ac-4521-bd45-9e68a6ee2453", "value": "3072:yhNL3LhszrQclI09Gwf5C6FqzgoD/NY5O1x3U9:yL76LOw86Msy/Ngr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998451, "uuid": "a92ac478-b4b2-4823-b429-6cb989a61b87", "value": 130284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "29fa2a4e-4dd2-4dbd-8278-f5ec67dfe90e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3eeff3c-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775998451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "e91447e9-7e32-4462-8c44-54fd50ea9f8a", "comment": "Malware payload", "value": "1189653a00ac34113425435a53985ebf", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "0a454b8a-72ca-4961-99be-7d2fd69f85cc", "comment": "Malware payload", "value": "7eb2c72f4aeeac4143bbac729845f23e051c735bf9f693d9783ff92fee0b6d37", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "6aa059b6-4483-49c1-acbe-ed201ea61dec", "value": "T17FC31377BF44F514C1424AF85BEE00FD7E58F0BF969602B9D44119FE1260A4A4AE86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "7dee02a5-1871-45eb-beb8-bd1d377884ad", "value": "3072:NSE2A0fM7TT/F/7DiOV7hl3E2KhijWBZymUXswBxOVbDFNdxd:NSE2A6M7pxVPU2U9BZeXBxOFF3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998451, "uuid": "d529e165-7699-4f5a-aa5f-074f741dadb3", "value": 125456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "d1c503d6-d5aa-4608-a1eb-38879ca09c15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ef14f4-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775998451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "ee8b9809-4935-4dbc-af4b-1a6ffb5f1fa6", "comment": "Malware payload (Gafgyt)", "value": "67059131cb7a3114724f06f51bc9480b", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "ac879e9e-7007-4d63-aa99-40f7a0cd7673", "comment": "Malware payload (Gafgyt)", "value": "e81deb508bdc9254999629a04029bda6c3304dc64d49b01826b2392a97575022", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "b3be84f3-ea2f-41ee-a430-8d4c651f45ef", "value": "T1F734CE97B60F1445CC2701F947CB9F8DAA2326068E2785EAAD0DB63F2A735DF24167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "b6aedee1-9b4b-43f2-9bf0-7d3d163d0a61", "value": "6144:c6Xsawy0vzyqy5gf+ahjBc0LOPoHzWCB4zdYrIq:cT9tyKf+apBcloHr9rI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998451, "uuid": "24426aa8-eba0-4cee-a4d9-f26195a45c0d", "value": 239536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "7da7a257-ff2f-42c9-a4f2-da089e507bd2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3efe141-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775998451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "f326242b-99c9-486a-83c1-1ed031269f8d", "comment": "Malware payload", "value": "850e08c90260e43596f12075f401f40a", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "f3324a72-d307-40d4-8ac0-b37c9d1e62c8", "comment": "Malware payload", "value": "d9446dd0cf0f40014b3893b46f2738d566b3c1799624d0b9381396f3545b010e", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "7d502004-31da-4b5a-953b-c0756a9aa481", "value": "T1CFE312417E978490B3F5CFB04BA42928CBD93D6AE0B056B75AD9978C7C310AD1847F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "c0c23730-c2b6-4725-8557-88c382a671fb", "value": "3072:3mUgDO7YsO3+chg9U929L/jlexmhHq/oaEdj7ahBf8F:3mUQO7tf+9qlU+HCvExG78F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998451, "uuid": "c301a8eb-9a43-4f4b-a19c-73c69b70fe61", "value": 145592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "5548f20c-a668-4cde-9229-199f74a15b8a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3f3db4c-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775998451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "4211d578-ea14-4a02-970e-90e4c1fbc40c", "comment": "Malware payload", "value": "e9b45478813a11d5bb42f9f0bebb14a3", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "cc8487d1-9fa4-4202-90db-453387ead1ba", "comment": "Malware payload", "value": "6fd609e316f68688764194b9a080595d1d6f9e908ca98350007ee07f5c056055", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "6784d06f-50fd-4657-a7b4-048f67da1e83", "value": "T13BE312426F21DFB5F011C8B187043CC1FA9D21ABD9E8E987CDD55A265A7C40A3A24F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "eb88c27b-750d-49b1-a63f-c410825ee423", "value": "3072:2UsttYf+HmaG7zm6DmiDGC9Mcsi4YgJtgdIPf8Y:2tHmaGPDlDV9MTi4YgJtgd28Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998451, "uuid": "96fdd1a4-7bff-4d43-aa5b-8c37f402c6d4", "value": 145780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "264b5170-a8ac-48c0-a2e4-5dd0c2cc11d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3f6ddfe-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775998451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "20eb5be7-640b-48ea-bc8d-f8d824256433", "comment": "Malware payload (Gafgyt)", "value": "c2a14cfa657bc746f9c606ef04493fc4", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "3fb43072-e1ce-4389-8adc-795de7eae9c1", "comment": "Malware payload (Gafgyt)", "value": "5d9f2ba5c70589082e30c99a07588fdde3f0219fdbc259ae31d7648d614751ed", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "f45cf2c9-d8fc-479a-9d6d-6838f5eaff00", "value": "T16FF34B17A88044FDD0E9E130CBDF812766B1F05A66317A0F4E811F612D5AF24AB7EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "9554d2f0-a266-4d5d-a0ba-1d5eff07e11f", "value": "1536:0wug66/pgi/1b3r6kCuZYkfTW/urIdwD6MZWN/4SJsN3q4LvRidSRaly:0wV5Bgi93vFfxt6MKRsDr1R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998451, "uuid": "23c4b43c-cf84-4056-a524-e029a33a82dc", "value": 164408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "0ec541dd-9d59-4fa2-a115-5da99bb6b450", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3f860b8-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775998451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "0b066a11-aa79-4fa8-9619-4e60fbb94e7c", "comment": "Malware payload (Gafgyt)", "value": "55981a2eb93712da9a0e06c09bdc44bf", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "9cf0d949-4dcd-4abd-8b33-ee5ed27168ca", "comment": "Malware payload (Gafgyt)", "value": "2fbcfd51276f446c199cb50ad3040167c9b398d521fb075cfca486f2c1fc3a97", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "67072b8e-bc49-4633-b19e-38c5cc55f202", "value": "T1C9A312827DDB2CA0DA3A1C36F1D893A5A4847082C43A18BFD4E4644DB4F7AF5416E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "03a285eb-981b-46b3-be15-6ee7cfc3a3aa", "value": "1536:YcRJol6Be1xbpxjuxsUEc0l23pTy6pHJLMFPGb/2/28d+xZZB3l2Ey:YlZbZ8lul2xdR1aGbG7d+xB3gEy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998451, "uuid": "d448717a-70a6-42e9-8004-85acd9c83ada", "value": 103884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "06dc7d71-80c2-4103-8c0d-54d7cb44d5dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3f8b8bb-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775998451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "7723e641-12bd-4952-812c-8cdde3fe9243", "comment": "Malware payload (Mirai)", "value": "6593c5faeaec5a155602221165acd1bf", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "cafbcbee-42cc-45e1-90d6-617dc5b7d858", "comment": "Malware payload (Mirai)", "value": "7f306047fd8f8be61ec871181c0419d58f02e5c8c0857f7259a39b867f53b7cb", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "16770414-12f7-47de-8bc2-7d029cfdc56e", "value": "T14B545C83F900CE7EFC4B937649574915B030FB7608520A77B217BD9A9E3E1DA2522F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "991e3daf-6743-486f-ac8a-281ce340aac0", "value": "6144:Scry3Z0hU5L6R3VNrPdulMyJcuOzFFSzF0XpOLEGsN:POepNy2aFsGsN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998451, "uuid": "c1b16595-ff3e-4d7f-a65a-eeb182b88815", "value": 279920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "5eea71e6-449d-4330-9ecb-20c2016769e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3fcbc9a-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775998451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "c917fdaf-3002-44f7-a42d-7471a53a7397", "comment": "Malware payload (Gafgyt)", "value": "b7f22ebd21270d86d75bda289ffc2b10", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "9af1ed0e-6630-4a22-af08-56070da56f3c", "comment": "Malware payload (Gafgyt)", "value": "3b196593f9d94d1d39ad62211dbaa8b15d0946d61605c5365100b383818836bb", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "38f45c0a-7ffe-4492-8fdd-763143c7bbd2", "value": "T1ABA31281F6C118845F0869661D4DEECF690DA3E2422CD2B563A0C8DAB47DDE4D3F74", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "8bbd2e04-6c94-4be0-b13b-88b4d8493dc5", "value": "1536:Ae6QRpSoffWSQ4nlRz9TGzOTkHaJB0HTHgEzIIolK5tn4MGRmOqvaPNul29:OiNf/9jGh6b0jgfIolet44a1ug9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998451, "uuid": "cdd7c3b9-8707-4abb-81f6-c8d8f2bbf33a", "value": 104040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "123979ce-3431-42ea-a196-d337e94d4bab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b400f820-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775998451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "219bdb10-c10d-42eb-a38b-6d2516c26fc2", "comment": "Malware payload (Mirai)", "value": "526c57764f3479beca31f93466c29cbd", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "bb310238-490f-4cce-ae3d-161a36edfe60", "comment": "Malware payload (Mirai)", "value": "012904ad4a930748947553f9aec5d73de1035ac93b9dc8cb38df7946190c1022", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "ef72443d-8b6c-4b25-a4a7-b834056f0457", "value": "T159544C87F900CE7AFC0BA37749574905B530FB7608520A76B216BD9B9A3A1C61533F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "8384d8ea-b042-4a02-b801-6d17b40a2ef4", "value": "6144:5loyN2ax14gJHZxbc2azSdOXwAyiIhEzr2zbbcs+Luw3Fv:XtjJa/gRbk3Fv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998451, "uuid": "1ade6c6b-1548-4ce3-ad90-be7ca692a368", "value": 280208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "0cf340a6-427c-42e1-aeab-d5dd4ce4f35d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b401f4ae-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775998451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "855ab35a-cbbc-4d51-9779-2997a5111d58", "comment": "Malware payload (Gafgyt)", "value": "c57ad249c1d94b6f86ce36542d34098b", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "fd0c237d-0d65-40e5-9f89-d3ea62395fe5", "comment": "Malware payload (Gafgyt)", "value": "d1e2eef854955f156a6253754d81fd09720fafdff4a61c0cb6fe1f28d35c738f", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "5a7d12a5-ac37-4fef-a59d-5482c123dfef", "value": "T14FD31213CD40A102F5FE74B1C03A57728B538DF107CAB51AA867610A39EE68B795EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "0dbac1c8-b827-4a1a-ad3a-e25862e6584d", "value": "3072:vnGju3GCJvZT/WBYBxeXQebNw40fOVfToyFYfkpwP7PwZ+h:eSFZTJBxHeb/0fOVfToJfkU4Za", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998451, "uuid": "08e4e9c4-9dd0-45bc-87f2-26a30a8433c9", "value": 136192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "b2c50756-c3d7-4964-981a-d7bdac83beab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4049a7d-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775998451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "a7effc5c-d097-4a4a-8c9a-05bd55e22984", "comment": "Malware payload (Gafgyt)", "value": "ae9ce8cdce7e2f983d944ddda34eeca8", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "d8dc7acb-f050-4c50-9c7f-fd3822572020", "comment": "Malware payload (Gafgyt)", "value": "2b03754d520f7be04c0f51c098d43e4d8acc4c09357dc34e7b1745eb98445dee", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "f3d49f4b-aa8d-40af-a01d-1954c2e0d3ed", "value": "T1F3D313721216C383F0D4F5FBBA3D56DC531A9B3E614B30639A7138E9154F22AE8524", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "9e57e28d-37ce-4314-8680-078d60b6b5c1", "value": "3072:InxKfyJzhpRIm6+Jv5m7tgZ0n72AjLHH8V4quMbA4TaW6:zkdpRIm6+JOtgen7loVvX0Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998451, "uuid": "decf65e5-ba46-4d19-b951-da14728ea696", "value": 138228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "c01c3839-1f94-4c30-b580-be20053cd19c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b404d8a9-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775998451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "c5216f8f-fb00-43b1-814c-bbbe8052732f", "comment": "Malware payload (Gafgyt)", "value": "0fb48410fd9fba2b7198d85395ad7897", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "840c097e-72d6-4f19-a294-5b3eb49c9ced", "comment": "Malware payload (Gafgyt)", "value": "6bf0662be83a2470033ed43d09aff6513efe0a8c644d0afc5e231e7dc98e0d12", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "630a2f1c-fb5f-4abd-850b-8ea02d718a71", "value": "T127347C73D9219E96D222A1F0B1F1CF780F62BD1989471ED9A5B6DEF44143EC9B0093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "1d7b1f8d-0f17-40ec-b732-443cdcc6e140", "value": "3072:AeorHtRJxEmO7aG56AroeDie+H07GTyvQ5epOFPuNgmS4A/2KOnWPmRZTB5yix0g:tfmIocDie+Hly45epOFPuNgOnWPmzJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998451, "uuid": "4292386e-ee17-4098-a45d-fdc4e7d082b3", "value": 233680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "ebcc45d3-5840-4c8b-83f0-b29dda4708d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b406fc06-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775998451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "9a0086e0-9743-4c82-9d4f-91a2a02ae457", "comment": "Malware payload (Gafgyt)", "value": "952a3d22dce784f1dd70397ebe28e320", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "3d24f2d0-5784-4bd3-b97d-b743850a6b19", "comment": "Malware payload (Gafgyt)", "value": "ad36df976a30be5d8f45838ea615e1cc00f8d5f42fa0869dcbee1c4319b83d97", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "84b2fe64-ebae-49c8-a9ed-ef9156535522", "value": "T1BCE30A16F5D088BDD0D8DA318BDFC0276670F4896332752F3E855B212D9AF249B6EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "65ab09f0-5ba4-44a3-a28f-c1fcb8710742", "value": "1536:q9H6cCPtR/GQI4HmjjALtLVpAgX1NU/r1MJwuyHGIn7AH5iIhpCrNwy3q4L6/5Nj:qwk4HmfOABrayHP7Ecwgu5NbT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998451, "uuid": "fa564c4d-1d7c-4b5f-beda-bce605d615a2", "value": 154032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "a7a4975f-b27d-4c7e-aa03-791a942ae00a", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b407145f-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775998451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "f1e210f7-c3ff-4766-b7b3-4977e8159bb7", "comment": "Malware payload (Gafgyt)", "value": "a4436613e19a0102b29748d89936692d", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "4bb2e525-38b3-46fe-838d-1b805f0615fe", "comment": "Malware payload (Gafgyt)", "value": "9f698390240c204cc9610120802001a2d206731ede7a84d68d118790ab3a3d74", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "0348e582-f28b-4fd1-95a2-b5085a8caef6", "value": "T11DD312109CA32A81F1C4E57AB00DBE35AD875650F2E63347A261EFEE6D582F3720E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "84f50e08-1f8c-48f5-ac4a-85fc1320c411", "value": "3072:eQbV8uwMAs6gL0WLLOBTVEWqReefdqr3STmm283q68m:bbV8bgtOBTVMR1fU/v86m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998451, "uuid": "f19cbfc1-dbc1-4cde-968d-fd3298ba1a89", "value": 138044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998451, "uuid": "7e619616-5035-4d8c-b881-5cf5835efbd7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b40f5a52-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775998452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "62fdd486-2fa0-43c4-a243-0ecca2c7e895", "comment": "Malware payload (Gafgyt)", "value": "cb31343d59c748540fed902306b79425", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "98a3b931-45ec-4519-baa4-41a68ae258a1", "comment": "Malware payload (Gafgyt)", "value": "f04230c06e1eee118571f25b22a34debc45f5d05e88cd2f72e22c71c960e0877", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "cc366566-0cdf-4730-a8de-ea17086f6bb9", "value": "T10234BEA7B70F0454CC3701F447CBAB5D6A2366068E2785EA5E1CA63F2A735DF241A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "a4d52ff6-5069-4649-a46a-d54e24c621ec", "value": "6144:mTXi6KEbqJ9q+P2VKSbvySdYhJChTd659qt:mr3bG9q+PuKTEYyC59", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998452, "uuid": "1703b928-ca86-4c8e-bb24-e0403d0a2d5f", "value": 239536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "e79d2c33-b29f-4daa-9283-88c6f76517bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b40f8813-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775998452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "1451e668-6a0c-4d15-a5ce-17ce27c638b0", "comment": "Malware payload (Gafgyt)", "value": "541b5922132c373aeff9f9eb485c88b0", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "c3005a13-ad15-46df-9a18-c7713b1b3c3e", "comment": "Malware payload (Gafgyt)", "value": "0f8286217385fad3eb7f004cc7d76b1b588720e64f526a4c81d747dd4f9ca396", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "515fa5da-fe82-42a4-821d-5f0014ddbeba", "value": "T190348DB3DD21AE96C22395F0B1F1CF380F52BD2989431E99A576DAF54183EC9B1053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "6ae3b483-7f35-400e-a508-722a83862a17", "value": "3072:fTsr8t2g1fG5+XAOgJDmedfzINBhY26Q44JzOG3paQQ1hqgD2uWqkK8Zct5yy0rN:7f/gldfzINE2544JzOG3pgfa7JKNY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998452, "uuid": "3b078ca0-4736-40d6-91fe-53cdf5e71f22", "value": 233680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "288fa165-38ec-4455-a763-9c040b5487dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b40f97f6-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775998452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "a2860e2b-ba33-4625-a650-10124748f79b", "comment": "Malware payload (Gafgyt)", "value": "303b92f60e618d5122ce5d81547e7434", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "c0b79a49-7446-4e88-8f27-3ce701469b86", "comment": "Malware payload (Gafgyt)", "value": "1a9d19450948fdc18d352f5e56e2b44d9e4f9911248633bffb3752f23e5d92c8", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "d5211119-e7a0-4205-b8c6-4823589257ba", "value": "T198D3127E89C0CE59860644EF3B90CAEF9441EA05F16D6326D844BAED648BB2733DD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "0cc23a26-94ee-4124-9218-3db0a73c226a", "value": "3072:LRSF4T6K96x/qDWDTCfsz+aUDI5PSZ9Jb3SkepsxldtjqOX:Eu9GZrUmPaBBtL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998452, "uuid": "2f39355a-0df2-4440-a3d6-3ef1ae10e015", "value": 132252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "6cd7c8cc-e39c-4bb6-8853-f9cdf33b2955", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b40fc954-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775998452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "c0b5cb54-4204-45e2-97d0-894781c5da85", "comment": "Malware payload (Gafgyt)", "value": "88114dd513f96890241e784ac4b5df77", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "c60c3976-33d1-490b-bf69-ed0c1acdef73", "comment": "Malware payload (Gafgyt)", "value": "38d795d31c30127d0980a08e26d34dac8fa2cb61eb0de5b0217707f02cdb39e1", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "de490a25-26dd-46c4-a5a6-4d143f69fe81", "value": "T109D313C948809D0A5BB416327F7B002F58010D1DB3D86E5BF3B2D9A74659B01BFD9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "8e6f5359-29e1-4a67-a88f-92a62721b774", "value": "1536:129eLx3GENYxga9fXIUgtfIBUOMTcKVcTBRpWrpr7eYyA6nZ9bEUQFkuYAg33NL:1u1ZPgtgiOolUNK5h2UUQmRAkdL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998452, "uuid": "7fd950e2-7601-44c6-b17a-db45ce3bce25", "value": 130092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "d66ee009-f1bd-45c8-8413-a39f9835e550", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4108c94-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775998452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "e9b986d3-642c-4594-ae52-a2fc267285d7", "comment": "Malware payload", "value": "69f4c5d186777c581b754f68b8269dc0", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "5e8d5b08-d27b-4372-8247-c58e86ef192b", "comment": "Malware payload", "value": "5d4bf73abe8e8a76fc4bf6a8b4e878be894c97beee4271d27f9e807f4e1d17a5", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "f00213e8-df61-4c03-b8d9-63351e09e37a", "value": "T12AE31218F2505734C3C2AA7EC7D5F563C10A34AA65012AAD48FD2DAB75B88717ED4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "9b5b7ad7-7f54-4fed-ae6e-60bdb1714f8b", "value": "3072:U7o4GDndewFsnNapQYPAr3atYia4XVR3dvrn5GPe:UA8NaWGttYH4XXNznZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998452, "uuid": "efdfc823-ef73-4312-bb34-e4766385a0d9", "value": 146568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "c1e41f66-ae37-4ec2-a569-7755d4c6cf61", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b414f434-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775998452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "3e3f0e5e-abc3-4790-921d-53d1f602e630", "comment": "Malware payload", "value": "abfd9ffaec09a60f11f072074fc5367a", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "5becbea8-2cfa-4c25-a683-ef097d4c25e1", "comment": "Malware payload", "value": "6f4d43c722c62f42212ea9cf8d3d90a48291544c0989ac9944386afef949c826", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "d509ff2e-ca85-4a3e-ac22-6ae5706bafcc", "value": "T141E31368BD148381E33758BBA115CCBE456CF895E998BD601CEEE8E902F117C84F5E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "98aa4b62-a492-4b77-af2e-5f1ebd623824", "value": "3072:GTDB68L+UMfhSgEnOXP039pwQ90yTEl1fI5R9zC4w/1ni5yjUFy6U:GfB6QjMfgjnO/gDwTyYl1fI5R9zC4YnP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998452, "uuid": "1795143f-bc70-43e0-8297-21590b51f860", "value": 146368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "e1733f23-703b-4fa1-a063-903d1b8c4f29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b41b30c0-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775998452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "f3e9f47b-fb1c-45c9-844a-7fbcedb494e9", "comment": "Malware payload (Gafgyt)", "value": "9b8ef054448f4e45f5daec1c9a52c995", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "854828db-6ea4-4311-8fc7-cfc1bf1d686f", "comment": "Malware payload (Gafgyt)", "value": "c0891f0e4b324bcfbea13a9f2ede84cd20e5806fd4f04eda2d074bc5f4ec78fc", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "8fb17887-d6da-4433-bb7a-8aa0226e15ac", "value": "T172D312F0D8D3D443E4EAC6B7CE5A43E9DA1E4623E5A47202517269749ECFF0D3A02A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "9a5df286-73aa-482b-b2f7-2c2e6c4f9d28", "value": "3072:Nq6SxcqGyEEGdslRvayfjlXrJrSZWGiRSfnMOysXwjXn66eGf1y:NOxcuE7slRiyJXrJmuRSfn5yZjXnCGfw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998452, "uuid": "af387b24-54b1-4496-b110-90b9b9850306", "value": 136352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998452, "uuid": "67fdbf55-5751-490c-a9b0-222ff068b725", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4fc42a5-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775998507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998507, "uuid": "10e1b0f4-34b7-4fc6-bdd9-7d7e0ddcc07d", "comment": "Malware payload (Gafgyt)", "value": "ebadfa1afb19c7b2e908e8f532df277d", "object_relation": "md5", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998507, "uuid": "f940e335-e01a-4ed3-b49b-18497df4578e", "comment": "Malware payload (Gafgyt)", "value": "644c1ea101d65d7980ec36327585848cdd56c3963e34e64995d935c4d70840c0", "object_relation": "sha256", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998507, "uuid": "1dfc6295-d837-4a72-a177-b767a473309e", "value": "T192A31268BF105DFAB56C2571CECB056BB6C12E9B36729988A6D133D0CE2F184E4D35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998507, "uuid": "b744ad3a-06bb-4c46-8afa-d97880959d95", "value": "1536:KhsCFRUoopPfqrCn7PpYWxWNexAlyirde+FppBoIXhkoXA4Er9wE3tIzvl2d:KaCvoRfqmn7pNx2JdHFN1A4w9wE3mrgd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775998507, "uuid": "3decc8a4-2627-4c7f-9f15-8b174d4a9346", "value": 106016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998507, "uuid": "047f4b74-5e0e-4eba-9e17-00aae85e1352", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41d23405-3675-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001266, "uuid": "7d050f37-d1f7-42d5-b035-6032fd62795d", "comment": "Malware payload", "value": "9f29cdd2bcd277c52861cdc55d42ae67", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001266, "uuid": "8e0222c8-9c51-45db-9bc7-71729aedd9da", "comment": "Malware payload", "value": "6a43c48471bd2899f2fd7aa798347607e9d89e1a9aeb7cf72a465df5defd4d02", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001266, "uuid": "cf6dad21-d128-4d4c-934e-5c1fd1b2740d", "value": "T187C42304340641D5835A2B1EAEC4E7E0BEB5A0DBFA1CF940AADD7ED06DE96A173C14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001266, "uuid": "352dc490-3229-4c32-9a88-e3da3d423212", "value": "12288:76wlOMWROC/FTeHo22Qm7NzofOr68mCeA924EwCo:j4MQOC/gHozN7NzomW8MA9H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001266, "uuid": "f8680783-a804-40c8-9f4b-7d0dac7faf99", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001266, "uuid": "42c56da9-4d45-480e-9d3b-be8b071378d8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41d31c42-3675-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001266, "uuid": "8255c33e-928c-4211-8fcc-bc985178973c", "comment": "Malware payload", "value": "3e1e9caa888d9c2f68bdde96e4b8eaa3", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001266, "uuid": "f3f00db1-649c-41cd-8a39-c6f6e4ee956d", "comment": "Malware payload", "value": "20f43dffbda61dba1bb8de59712d7d43bff1ca58261bc9e25e79de19cff904e7", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001266, "uuid": "711f6bfe-6bb3-41b7-bc90-2aa4251767db", "value": "T13AC42304340641D5835A2B1EAEC4E7E0BEB5A0DBFA1CF940AADD7ED06DE92A177C14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001266, "uuid": "d6439f9c-d724-472d-8978-0626e2242264", "value": "12288:76wlOMWROC/FTeHo22Qm7NzofOr68m6eA924EwCA:j4MQOC/gHozN7NzomW8EA9f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001266, "uuid": "b15d943d-4f8d-4156-96ad-4eb267cf1fd0", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001266, "uuid": "4ac71c1b-f45f-40d6-8398-2421297695b8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4223eba0-3675-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001267, "uuid": "d67ff0dc-dfce-4f27-9a1b-fe6bb7e7d80f", "comment": "Malware payload", "value": "8653a2b335aea562769f893024ec8dd9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001267, "uuid": "8dbe1a1b-8c3a-44bc-83fe-2f78503523a3", "comment": "Malware payload", "value": "d3781234f2c4cdf8935baf737eab0bfabc52618661d3f7949d65674b210355de", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001267, "uuid": "9aa661cf-88ed-4587-8a33-f32a6854da25", "value": "T173C423B7179AB0897503E3E4814C6D94D9AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001267, "uuid": "74f6e2e2-7bd0-4263-8474-250e995acacf", "value": "12288:AeElNtIBB2gX3U59A7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ez4:AeSIBBfHXm6Jj6ESfUxZ91kmY/9HeM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001267, "uuid": "b2122a4a-9313-4ee5-be43-f13966b132c7", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001267, "uuid": "80a46c80-68c6-4d90-9258-167e4389be74", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "449fd457-3675-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001271, "uuid": "4c4e6594-343c-455e-b398-2edaca82b5c0", "comment": "Malware payload", "value": "2391b380dbf04e1cf687996d317173d6", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001271, "uuid": "a58c4a1a-d834-4228-bcb9-7986f36cd0fe", "comment": "Malware payload", "value": "034c720f6e03c2360e590ea1fdf3fc4bd9cb5f542d7abac40ae08324414af4f0", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001271, "uuid": "34fec0b8-3cdf-44af-9c40-849760367320", "value": "T161C423B7179AB4897503E3E4814C6D94C9AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001271, "uuid": "6e7ba88d-ac11-42a8-906a-99ee02f3971d", "value": "12288:8eElNtIBB2gX3U5ZA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ez4:8eSIBBfHrm6Jj6ESfUxZ91kmY/9Hes", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001271, "uuid": "e636c4da-6279-4250-8a7a-68b323c8e45b", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001271, "uuid": "a1e43401-77a8-4f58-8b9d-d47e31cc6fc1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ecb2229-3675-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001395, "uuid": "903b3a16-5229-4b9d-86f1-8dcf6fd81cb2", "comment": "Malware payload", "value": "971555400752b0969f2f3e1bb1c0a946", "object_relation": "md5", "Tag": [ { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001395, "uuid": "eaddf556-a58b-4c8b-8025-78a1c41af718", "comment": "Malware payload", "value": "a6f8bb0048f11415c1aee2b4d00e8c94d9dd71f4ee3033ad2571482bb44c0209", "object_relation": "sha256", "Tag": [ { "name": "shellscript", "colour": "#240de3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001395, "uuid": "82a0f455-50d0-4f6d-9904-258d6d8062aa", "value": "T184A13294FDFCF532FC7D5635B69890887BFA6B6E85332C047E62539B620C548310A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001395, "uuid": "1d766a50-f726-4d65-8582-57e9e00c4cdd", "value": "96:Oww1TCTSUq9djaRtdLRWBC6b6CrSJ5YRa/jahJBhsvUTLfhtGWqYrWy:KwSUq9d4ErrSPylHBOhYz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001395, "uuid": "5643ec20-c76b-41b9-971e-185bf7b4f682", "value": 4767, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001395, "uuid": "f2d364d8-229e-4d10-b921-b4bd3a3eb3fd", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad44e823-3675-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001447, "uuid": "a9a999dd-2142-4e10-b0e4-df2b4b227b40", "comment": "Malware payload", "value": "4f6b7bf1fbdccce10ec1db31f2331570", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001447, "uuid": "96247c9f-d895-41e1-baf5-d073a4664c3c", "comment": "Malware payload", "value": "2f1f415e4acd3d6a684a0d6806f866e12e333620519d1e394b5cdd576d6cdbbb", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001447, "uuid": "75f237b6-e1cb-4712-af3c-6761e12c7bbe", "value": "T17EC4231DA0547B51F64B6A78B323CDB09B2AD03FD219C388A0840B399B5BE5769CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001447, "uuid": "24085989-894c-4ff0-9830-11d724ae87f9", "value": "12288:0MU+0xq75aS9iYIp6cP/G2Bku6zXLqHXP427bt:Q+J71vI/GzXGftHt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001447, "uuid": "bf062ce2-0ba6-4e2e-87cc-00ea6558fe13", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001447, "uuid": "40fb113b-b9c4-4501-beab-700ce0834c64", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad6c14f1-3675-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001447, "uuid": "e0530299-7db9-4491-aab9-25671756af39", "comment": "Malware payload", "value": "7f9d6331afdfb9396043765f57c06ad8", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001447, "uuid": "46e54ce6-38dd-414e-8f08-29d741f71602", "comment": "Malware payload", "value": "d7fc8ceeba5f99959903d3c94996b73f7199ae2f88f0ab91cf40b61e362c4ff2", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001447, "uuid": "941fe294-ba62-4fc8-81eb-b0503babbdd3", "value": "T151C4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001447, "uuid": "91a6af89-c90d-46cc-a58f-9ae9bcb3b765", "value": "12288:dMU+0xq75aS9iYIp6cP/G2Bku8RtNvC28c5/VTUPkYy+:p+J71vI/GHYc5/pe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001447, "uuid": "a9be3f2d-ac92-461d-a561-08bf6c41ae70", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001447, "uuid": "1ab1364a-fab8-4098-87d7-a9069ede2d3d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae5ae6b3-3675-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001448, "uuid": "a90f4aa1-b548-466f-8b7b-37ae67fc806a", "comment": "Malware payload", "value": "82e30c835e055cd6685c815aaecd1280", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001448, "uuid": "24d52eee-88a9-44b5-a1b9-5474141403d0", "comment": "Malware payload", "value": "12aa496cf2bcdf445571839e547f7e2ed8fbfea9eb013f8c98f02ee00ddac348", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001448, "uuid": "d2c176b1-d6c8-4c48-b34a-93f3f4777534", "value": "T13FC4231DA0547B51F64B6A78B323CDB09B2AD03FD219C388A0840B399B5BE5769CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001448, "uuid": "fc1a9dc8-2fb5-4f21-90a0-e20a7504aa84", "value": "12288:mMU+0xq75aS9iYIp6cP/G2Bku6zXLnHXP427bW:W+J71vI/GzXDftHW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001448, "uuid": "aa2ba14f-bff9-474f-8b7d-87653b62b725", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001448, "uuid": "66e7185c-3762-4855-9bed-158ba95fc33c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aea33000-3675-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001449, "uuid": "44257e55-80a9-4272-a1e6-318d16f70232", "comment": "Malware payload", "value": "355b6bf70006eee64a7eed3e7aa2ddf8", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001449, "uuid": "9adb4215-b879-470b-ae2b-2fad26480480", "comment": "Malware payload", "value": "2ab2ccb2d3dc1f7fda14ec1d724831be1ace82d199cf1201d819a354b7c564f2", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001449, "uuid": "aaf9ebe0-3834-41f6-a63d-7d9be93ef433", "value": "T102C42367226F72500DFE92ED4E4156186D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001449, "uuid": "a9f6343f-6b0c-4163-905e-25c0b3e23f05", "value": "12288:qeCEhtz9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakB:dtpA/f0Za6TCXKBxlS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001449, "uuid": "5f390d1d-ccd5-4433-8cbe-9628d5ba55a0", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001449, "uuid": "152ac854-9918-4af7-bd7f-feac30f5a47e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af99fbc5-3675-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001451, "uuid": "2e42c6cd-6082-4573-af1c-e5b636c13f99", "comment": "Malware payload", "value": "ad0a61e1cdbf1746c9bac192c2298382", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001451, "uuid": "890fdc6d-00cd-4f9f-8dd3-452c5a5441c2", "comment": "Malware payload", "value": "e99e362931ad05971c84e48a08832dcccb492a19c7cd3df132cd69de80697b2f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001451, "uuid": "03008d77-116e-4b9f-9ad7-48a9f8112e55", "value": "T18BC4235D7018EB38E507A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001451, "uuid": "cb75daca-865e-4cd8-b0ba-a049ed426b0e", "value": "12288:VMU+0xq75aS9iYIp6cP/G2Bku8LtNvC28c5/VTUPkYyA:h+J71vI/GlYc5/pg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001451, "uuid": "d4f94442-f584-4845-b3b3-249b6e72a29e", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001451, "uuid": "b52831f0-ad19-44cb-9d11-ed5af6bbd30b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0a6afdf-3675-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001452, "uuid": "b90be295-07d1-430b-9e53-b0ad7f22dd64", "comment": "Malware payload", "value": "76b341fd125543d443469a0aeaad4594", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001452, "uuid": "a949c11a-891a-4512-a386-22b5d7a8f6cf", "comment": "Malware payload", "value": "1969fea9fff5e0fd593976675530ea6bb841be91f29b0c2019261e3acf85ee8f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001452, "uuid": "c99d25d9-7e52-4a76-8504-d55ec8a56605", "value": "T117C42367226F72500DFE92ED4E4156186D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001452, "uuid": "c9f72c6c-91c5-4838-9b52-e40aba69c663", "value": "12288:CeCEhtZ9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakz:FtHA/f0Za6TCXKBxlY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001452, "uuid": "1c836b34-5543-4e6c-81dd-76172e130608", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001452, "uuid": "9a260508-98ff-4c29-a9d3-02a79663ac82", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68046112-1a39-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001507, "uuid": "71d9e22c-ce3d-4d17-843b-b08ba9543a6f", "comment": "Malware payload", "value": "c4374912473cd42cfe4e1abab51af40e", "object_relation": "md5", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001507, "uuid": "7f9f9835-17b1-4580-a918-51e8ae86060b", "comment": "Malware payload", "value": "212c76daf355ede116eb04d4f9d08a112d07940a14dc248bc568ff1ba0a64e18", "object_relation": "sha256", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001507, "uuid": "458f063d-da22-46c1-91ca-e0ae070e0240", "value": "T13DD4F8B462047880C4AAA7729D74AFA8E23D11A9DFCE3ECC1194FAD01FB37557A0D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001507, "uuid": "a0cb2fdd-e65a-4caf-b448-1deb3e3f89b4", "value": "6144:ZJSveutXkgEoCqT2741a3LywBTwjMtxwHVMeOF0buUwKB:qeuhra7T42MMQf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001507, "uuid": "7792317b-40ff-4c89-b002-8fa507b90a86", "value": 617316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001507, "uuid": "204bad9f-889d-4bd3-9589-803c6eb66ceb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "848fddfd-3676-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001808, "uuid": "ebf99e74-5420-4a7a-862d-82e5fc282b51", "comment": "Malware payload", "value": "8bac059d8c799ba720b873620d9874ad", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001808, "uuid": "eae6c1b5-3116-427b-95c7-fc32f848eb10", "comment": "Malware payload", "value": "41dca8c61bc228f93b4508cc5352a2ed922db6564e63d7321b96c674d3f9acad", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001808, "uuid": "75129d95-ca52-48ff-8ff9-77e6062c98e7", "value": "T1E7B423CD64BED0A87B658DDA9FDCBFD30CFC003A6D7526F2A51C1A13A1C400B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001808, "uuid": "a8d27546-13fd-42da-9232-86303fa5f168", "value": "12288:PB/e4pqNFTFbEXk3DoGbDDGIabs/7iiEVwYg2l3/2Ny1:PBm4pgTtoGTabs/7iiWw0D1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001808, "uuid": "be11350c-02a9-4086-921c-44ff82a8d30a", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001808, "uuid": "1e5a82c4-7c71-4ddb-80f2-61784c0c4992", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84a05e4e-3676-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001808, "uuid": "c51a9a6d-3d51-43e1-aace-29a758d9e92d", "comment": "Malware payload", "value": "ef2bf51d52dea74e76bd6f81356bbb95", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001808, "uuid": "2554e381-d3e1-4e96-90f1-a5b56bb73d5c", "comment": "Malware payload", "value": "86d48e5c36f87153512cfd5f151407fdd794f3b0f916973c82c6f92f8bbf6356", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001808, "uuid": "ef7ff27e-8861-4f0c-9b0a-927d9d1d5aff", "value": "T1E4B423CD64BED0A87B658DDA9FDCFFD30CFC003A6D7526F2A51C1A13A1C404B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001808, "uuid": "d047bd7c-dee2-4f86-b3db-fd674dbc51f5", "value": "12288:FB/e4pqNFTFbEXk3DoGbDDGIabs/7iiEVwYg2l3/2Ny3:FBm4pgTloGTabs/7iiWw0D3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001808, "uuid": "00be6ea5-6d8b-4847-961c-eff6826c5a9a", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001808, "uuid": "3678a37d-3861-45fb-8fca-6e9c07afa098", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84a27c18-3676-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001808, "uuid": "6d3b5f18-33d4-42d3-ab41-e28095f8b636", "comment": "Malware payload", "value": "be36acf72e9746b1bc81a44bdefd9561", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001808, "uuid": "33527e03-dc93-4009-98b1-d30c54e2467c", "comment": "Malware payload", "value": "61f7942684da9a247d4414b3a5d8b32256b3a25fb213d916026449bf89266cc3", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001808, "uuid": "d5598400-56ba-41af-87af-0b374e88b7a3", "value": "T1BFB423CD64BED0A87B658DDA9FDCFFD30CFC003A6D7526F2A51C1A13A1C400B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001808, "uuid": "8f7c4abc-29f8-4692-a926-c6295afe2cd3", "value": "12288:xB/e4pqNFTFbEXkXDoGbDDGIabs/7iiEVwYg2l3/2Ny7:xBm4pgT1oGTabs/7iiWw0D7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001808, "uuid": "85365ab0-c5d9-40fd-80f8-890b36a4afe9", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001808, "uuid": "d01d75a1-32e4-4a98-ab60-9002bc1819ff", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84b8de7e-3676-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001808, "uuid": "62ef3be1-a65a-436e-8860-0b208dcfec6b", "comment": "Malware payload", "value": "92ce7172ec3ef5804e3e26ced8c6e766", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001808, "uuid": "279730eb-39a7-4ad2-b473-720a1be9a3f3", "comment": "Malware payload", "value": "1c4a885b0b46b95df623c4c7ab8116d39060af4278083cf3be8018c7f1d3a79a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001808, "uuid": "ce426947-c186-4f84-ab1e-cd8731989068", "value": "T183B423CCB6CB88CC55A63134E6A20B4154DBBF33B2DF7391B5B849700DE6A6710297", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001808, "uuid": "2e246b73-1ad3-4539-bbad-f085bbdbe2d9", "value": "12288:pwsK8MG1KnyC/G76u6M0gXar5qduBct2ien3P+be5:3KGcGmuwj5Qen3PwE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001808, "uuid": "893c7247-1c56-4b04-b9b1-1f437de9b6e2", "value": 515391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001808, "uuid": "188206be-9cd3-42ee-9196-c841504b3eb8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84bc701c-3676-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001808, "uuid": "7f2f543c-bf84-498e-a15d-3e6965e05bac", "comment": "Malware payload", "value": "333e0a93e42a03c1d5c8b4c9b5b88142", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001808, "uuid": "b607f565-af40-4685-9caa-ac6872c256fc", "comment": "Malware payload", "value": "d805c2466b706c7411a8a66064da381521a8f1f8492c0d89f4a6a24d05428337", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001808, "uuid": "23a8034e-8708-49d5-aecf-96e61e569768", "value": "T1ADC42367226F72500DFE92ED8E4156146D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001808, "uuid": "0aa2a36a-ce2c-421f-a9d3-ae577dcd365c", "value": "12288:AeCEhtA9qO3g/ALyYG0ZaDajTCXMO8xzDOeQak0:HtqA/f0Za6TCXKBxlr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001808, "uuid": "85544330-9694-4dbd-9574-dcf26526d3b9", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001808, "uuid": "4e948747-b694-486b-be41-9126ade10237", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85f64a91-3676-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001810, "uuid": "b4ebeef3-b80f-450d-8552-d2fe4285ee2c", "comment": "Malware payload", "value": "525e6748515dd21ce340686c52f58121", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001810, "uuid": "50561f81-b227-4ca3-8a3f-d5639ea2cc57", "comment": "Malware payload", "value": "0d5577707e273d8cd08a10cef64ee21e073ac48c89b7b6a61e64acebd33dd633", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001810, "uuid": "e93cd4f1-1cdd-4876-888a-3dce8ed02f59", "value": "T1EDB423CD64BED0A87B658DDA9FDCBFD30CFC003A6D7526F2A51C1A13A1C400B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001810, "uuid": "6fd6d680-894a-4807-94c2-4e31471515f3", "value": "12288:dB/e4pqNFTFbEXkbDoGbDDGIabs/7iiEVwYg2l3/2NyH:dBm4pgTxoGTabs/7iiWw0DH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001810, "uuid": "973e7dfb-31b7-4a72-851f-dbcb3d64bce8", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001810, "uuid": "26877ffb-6f2a-45f0-9aa7-f0488ef61e40", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87564766-3676-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001812, "uuid": "38de72d9-14f4-498a-9203-ec1a4dbd20b4", "comment": "Malware payload", "value": "d3bc746319cb477db87cc05935cef116", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001812, "uuid": "77498991-55d8-49b7-a1ab-df71a9cc2e9a", "comment": "Malware payload", "value": "e13a74fb9c14be8f16befd2cad7a7bb10889447093c8c73284871f6f511719d5", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001812, "uuid": "6306fe80-b006-40a3-8054-c1f604ddcc5f", "value": "T128B42369227F71900C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001812, "uuid": "e6662927-1a3c-4414-a3f7-bb5982d44c98", "value": "12288:77JZAaFpe0qO3g/ALyYG0ZaDajTCXMO8xzDOe3WO:rLpeeA/f0Za6TCXKBxmO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001812, "uuid": "0307ca00-0ccf-4b02-b240-ac3803a3a8e0", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001812, "uuid": "bbcc4ce6-ac06-43d0-ae19-fbfb6905abbc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e426b52-22a1-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1776001813, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001813, "uuid": "d8e5d457-77eb-4f7b-8932-a8f8f1490c39", "comment": "Malware payload", "value": "f40403950d6997ffb41069eac6a736fe", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001813, "uuid": "1501f5e1-7bf5-4ee9-a98c-8b0c57207be2", "comment": "Malware payload", "value": "1d6405423145cf1f46ca80bf5d7cc4789c9629c356de00c8e151314d7c76342c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001813, "uuid": "6a17d60d-41e7-4dc3-a37a-175c5cc5f40f", "value": "T13CC423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001813, "uuid": "95742c59-8e3d-4cff-9819-90543be21c76", "value": "12288:jyBXIs7rM1tcqOqO3g/ALyYG0ZaDajTCXMO8xzDOee58:2ImQ1pEA/f0Za6TCXKBxeK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776001813, "uuid": "e665c02e-2101-4420-9202-f74626f39fb8", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001813, "uuid": "e7f95962-bf73-43ef-8d23-ccb020e1916b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b06af6d-3677-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776002168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002168, "uuid": "45bb6821-300a-45b9-b041-d729a8bc9497", "comment": "Malware payload", "value": "da61dfdcee038a1af7a899300b59d55d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002168, "uuid": "fdc634b6-6db0-4f24-91aa-b651f55575c9", "comment": "Malware payload", "value": "5fc81d3fc1ccb622699222255ddec9540be1542ba72286c9df305b9c957617c4", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002168, "uuid": "f6eae4c8-a0cb-432d-a292-2cfc90a9d5aa", "value": "T12AC42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002168, "uuid": "9711a9d2-83aa-4d7c-bddf-7c755b8d3604", "value": "12288:T6wlOMWROC/FTeHo22Qm7NzofOr68mTeA924EwCt:L4MQOC/gHozN7NzomW8FA9a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776002168, "uuid": "1f2ce935-787c-4f67-ba1a-1865d4c53a68", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002168, "uuid": "930ab5ce-915c-40f7-9b1a-52e124141d0d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c3b74d7-3677-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776002170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002170, "uuid": "92eeaaeb-324d-42a3-8277-ab13b42046d6", "comment": "Malware payload", "value": "2edc977f2a9837d3a5d3ff3125f4fd92", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002170, "uuid": "373f822b-63bc-4fbb-9c17-b0878e6ec3ac", "comment": "Malware payload", "value": "42ae1c601a264670b6602a1852361b408f9cbbf9445339e9cd4cf40b8f93e943", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002170, "uuid": "42ce4b69-a9a4-47c3-955f-558cdec4f5ec", "value": "T15DC4231DA0547B51F64B6A78B323CDB09B29D03FD219C388A0840B3A9B5BE5769CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002170, "uuid": "258a876e-a1f9-4ac4-8b27-c13335302de0", "value": "12288:mMU+0xq75aS9iYIp6cP/G2Bku6zXLFHXP427bU:W+J71vI/GzXBftHU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776002170, "uuid": "14e25681-212d-4786-bdc9-4a94b8fd6503", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002170, "uuid": "3f935641-8f53-43fd-a98f-1684f66357d2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d339dbd-3677-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776002171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002171, "uuid": "c094e2e9-c80f-4e24-bd3c-c0c3a390bf74", "comment": "Malware payload", "value": "fce08cb96b20ea9c2c3b6c6f1f4a4ef5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002171, "uuid": "bba7263a-8f2e-436a-8286-5dab76101209", "comment": "Malware payload", "value": "b3b0edd37e1a46f6d39a6b142277255f70d25a827009a258752501f02bd1ca59", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002171, "uuid": "0281a9aa-a1fc-4f33-9aa2-6031f02d16bc", "value": "T14CC423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002171, "uuid": "5a24b67b-7323-4e38-8651-5f7eaa008694", "value": "12288:dyBXIs7rM1fcqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5o:IImQ1/EA/f0Za6TCXKBxem", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776002171, "uuid": "51b5f59e-f6ea-4f16-92a4-162e4fd3705e", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002171, "uuid": "d82a1ce9-a250-45ea-b777-477224fae84d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d40e40f-3677-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776002171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002171, "uuid": "ca710229-f7f1-4970-8af8-e1805886280d", "comment": "Malware payload", "value": "4f0a24bb4a5b2c80111d73d8315e2b24", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002171, "uuid": "2e12dc02-8ffd-4f11-bc97-eee0142fdc6b", "comment": "Malware payload", "value": "a53124a2d047d8397b1e160f2ee7f859b905ef63a32db4ab1c6c130d08f5400d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002171, "uuid": "0668840e-8e18-4fa9-8b0e-a0eaccf62366", "value": "T1D4C423ED0B6E70884C7B13659B8722145E2E0F725A10B7D7A2E8D64D4E17A8C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002171, "uuid": "1e2de111-68e2-4ef6-91a2-329b380f9bb8", "value": "12288:6yBXIs7rM1ScqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5s:/ImQ1mEA/f0Za6TCXKBxe6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776002171, "uuid": "a4c11438-3fec-460a-ab1f-9b8e9558a133", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002171, "uuid": "cc2036e5-59cc-479b-bcdf-31619f8d2425", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d5cd9fa-3677-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776002172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002172, "uuid": "2eb982b6-7d7e-493d-b6fa-5b8ece5ea0a0", "comment": "Malware payload", "value": "26f621364cb1abad9b4168afa64efe42", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002172, "uuid": "60aa596c-c124-4ef4-b5c8-378f03dbda5e", "comment": "Malware payload", "value": "d0121543b2765928616b5f30872dcbdfdb7dacf6c1305e7d28cf3fa195888f99", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002172, "uuid": "b1001a56-171d-423e-9a72-aaa6820151db", "value": "T100C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002172, "uuid": "2a83a70a-d2bf-45d0-8b4c-c8cb620ac08f", "value": "12288:uyBXIs7rM1mcqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5U:7ImQ1CEA/f0Za6TCXKBxea", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776002172, "uuid": "d7d764ab-e8be-42bc-b97a-fb0ed22ef75f", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002172, "uuid": "cd81931c-07b6-4a6f-a189-2af41c824d29", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a55d973e-3677-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776002292, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002292, "uuid": "8f9ed1c1-742b-4c11-a39e-b0dd151ac054", "comment": "Malware payload", "value": "594cf555d574a60d3f9d88e2b243f1ac", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002292, "uuid": "ff26909b-57d0-4519-8e25-9df270389683", "comment": "Malware payload", "value": "12761c0d704a14d7209b63e16eb2c52ecd995f836f3b51128ca7378305e2370d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002292, "uuid": "c532d286-5b14-461b-8bdc-bab7debfe723", "value": "T1C4C4236D7018EB38E507A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002292, "uuid": "947e4970-55af-4cf6-a0f9-d6fdb9bbe767", "value": "12288:lMU+0xq75aS9iYIp6cP/G2Bku8htNvC28c5/VTUPkYyu:x+J71vI/GLYc5/pO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776002292, "uuid": "83582c33-905a-48df-a6ac-ea27486add71", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002292, "uuid": "31a08bad-d1f7-4486-878d-36d264d3ac92", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a55e5447-3677-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776002292, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002292, "uuid": "0e56f1a5-20fc-4723-8d55-7c4e88b4683f", "comment": "Malware payload", "value": "9b10ad666d08420593c980453ba71d58", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002292, "uuid": "fb1a75c2-7709-427e-8b83-258ca1551bfb", "comment": "Malware payload", "value": "183a236a6af7dd59ba328e25048e40a64a8781b65f368d1e875780eaed2c9672", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002292, "uuid": "63b95710-c55a-4440-8f0b-5ca48ab8497c", "value": "T193C42367226F72500DFE92ED8E4156146D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002292, "uuid": "889ad74f-d1c0-4edf-a219-6d14372c9e22", "value": "12288:keCEht29qO3g/ALyYG0ZaDajTCXMO8xzDOeQak+:Lt4A/f0Za6TCXKBxlx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776002292, "uuid": "f553f715-1134-4851-a40c-302cbcfd24e9", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002292, "uuid": "fa8c6a5f-3477-41f8-b68c-e3ee7002c9d2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5d162b7-3677-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776002293, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002293, "uuid": "3922d7ae-aa2e-41fc-b8df-586f72debd32", "comment": "Malware payload", "value": "d2aa58c68f360a5d66d3e48252f46fd1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002293, "uuid": "d1b0d022-1dc8-4f1e-a64d-12bbfe9ef82d", "comment": "Malware payload", "value": "d5abe59abf73ed705aa7bba798dc417525aec110f3af48cd01c2074e763b6e21", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002293, "uuid": "140fd150-0630-42da-9ea8-6cce18543a3e", "value": "T161A5E156A3B440FCD0B7D2B4CA464A0BDFB2F8061635969F43D44E562F23B729A3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002293, "uuid": "1c86ce2f-4aa9-4379-af53-c313a8c32ede", "value": "6a9f6a260ca79fa9a2f283172c4ce776", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002293, "uuid": "2c9d2606-954c-4eba-ae10-a8469449772b", "value": "49152:3EBfviDsP8+vG5+At/pjjGRyQs8j2yuJQ2O2eu:MWL+vIt/pghsO2p7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776002293, "uuid": "5cd1ab93-10d1-4e0f-91bd-cf901f2d16e5", "value": 2202624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002293, "uuid": "be4355f0-00bf-4dc5-8313-fefdb8bf6a86", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a60551cf-3677-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776002293, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002293, "uuid": "4241d3e7-f4c9-4734-84f9-d31b1fd7a0d3", "comment": "Malware payload", "value": "c24f0bb8a2ce550ebc703be1ae54539f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002293, "uuid": "b3d35e57-32c5-49ce-9952-7698f5a9d7a8", "comment": "Malware payload", "value": "541fd4ff3b5756efe1a7994fa82ec132e9ad1c09a96ab5c6abae34c005463f06", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002293, "uuid": "7586c5a7-48cc-4e6c-b7fa-0085b483de64", "value": "T185C42357226F72500DFE92ED4E4156186D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002293, "uuid": "4237cb93-ce15-47fd-a5c8-10cd99654ddb", "value": "12288:keCEhtC9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakC:LtUA/f0Za6TCXKBxlt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776002293, "uuid": "b2ea63c8-67c9-46de-9dd7-f1450820cbff", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002293, "uuid": "98dbea4d-eaff-41d1-81dd-14aee337074b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a74a2f42-3677-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776002296, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002296, "uuid": "b6559473-f671-4949-a13d-d29abab0a83f", "comment": "Malware payload", "value": "d1b20959e795223b788caa73ef874a34", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002296, "uuid": "aeeaef7b-eaf1-40dd-bb26-c3b152085ae2", "comment": "Malware payload", "value": "ebdd1c626f80a1af32f260d8e9b0b849400278e2b60dfa45678e3c874950224d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002296, "uuid": "e438d9e7-5900-4166-ad27-f3613fa4e291", "value": "T1BEC42367226F72500DFE92ED8E4156146D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002296, "uuid": "8b2690e1-329d-470c-85b9-4b4777f570d9", "value": "12288:geCEhtw9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakE:ntaA/f0Za6TCXKBxl7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776002296, "uuid": "2bc98e36-d60a-4418-89ba-49c7e4c2d3a3", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002296, "uuid": "4eb212d7-e030-42d6-b327-39fb906cebdc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "344c01b1-3678-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776002532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002532, "uuid": "4b181ead-a132-45e1-b762-6e612464c66c", "comment": "Malware payload", "value": "b539d000fd956f28848b4ecb1388bc9e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002532, "uuid": "a145cbb9-0a8e-402c-954c-77a623b846c6", "comment": "Malware payload", "value": "81438f4a485d4b9a6c3d04cc8f4aa9ec05a9e3e6431e838020db1f9a59c35bb6", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002532, "uuid": "40111be4-5b39-4a0f-a6f9-d20a6c0c7a1e", "value": "T157C42367226F72500DFE92ED8E4156146D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002532, "uuid": "2c82a3cf-767b-4df0-b5d0-4153e9dd0b98", "value": "12288:meCEhtR9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakH:ZtfA/f0Za6TCXKBxl8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776002532, "uuid": "9b5924ec-1e59-4697-ad99-8ba7ff1f7147", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002532, "uuid": "52d6a62a-935b-4676-93c9-287cb852b5bc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ba43b0c-2e21-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776002533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002533, "uuid": "8b3e6294-a3b8-4f95-9405-8edff85a3b4c", "comment": "Malware payload", "value": "d9990af51af545db25380e1f3498be6d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002533, "uuid": "5817c54c-0821-40e1-9f97-d55bc8e315f3", "comment": "Malware payload", "value": "cc66356cc0cb2924792735c1ba3adaa1335e198df21068b526663d1007380e87", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002533, "uuid": "d783eafb-e31c-4db2-8bed-c0cae874199f", "value": "T15AB42369227F71900C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002533, "uuid": "47a92051-dc21-474a-b189-4ad3f4b847da", "value": "12288:s7JZAaFpeXqO3g/ALyYG0ZaDajTCXMO8xzDOe3WU:oLpebA/f0Za6TCXKBxmU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776002533, "uuid": "b6bdcd5f-9454-43c5-8c78-f3e634882b75", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002533, "uuid": "ad3b8303-a7e1-4df7-b476-ae76bd8f0b7d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34f1fe7a-3678-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776002533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002533, "uuid": "b6190966-a316-40e6-a3c8-292182618679", "comment": "Malware payload", "value": "bf7dd0809d6b51b1a4f1682f862ce66e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002533, "uuid": "244e6057-8275-4d10-b818-1acde10cf31c", "comment": "Malware payload", "value": "962e7564146b040ce6e8584192590ab75acbb4eee2abc2540b1c49056ecee92c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002533, "uuid": "a625aa60-49c6-4803-b619-1060d9f2ee87", "value": "T198C4235D7018EB38E5076174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002533, "uuid": "6c38a8ad-4037-4384-8f21-fb93110b4a74", "value": "12288:ZMU+0xq75aS9iYIp6cP/G2Bku8wtNvC28c5/VTUPkYyV:d+J71vI/G2Yc5/p1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776002533, "uuid": "fa9f95d6-83cc-4267-83ca-9462afb00c9d", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002533, "uuid": "72b6ff58-96cc-4ab5-bf66-28c5d12a9244", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3506028b-3678-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776002533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002533, "uuid": "e076e79f-61b3-46a8-8aa0-50adb9418620", "comment": "Malware payload", "value": "939ff10708961426882aa8dd317abeb3", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002533, "uuid": "74417b72-434e-44bc-94d8-2f2d16d73fec", "comment": "Malware payload", "value": "35e2e58fb421a0a5ba50f6489ecd3db6049729d7647e5ad19ef7e6b89bc99a31", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002533, "uuid": "bd5619be-19db-434e-9a7d-b141f9e10873", "value": "T1BEB42369227F71500C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB199638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002533, "uuid": "b7fa1d43-3d4b-41c4-a690-a87d94fe69a9", "value": "12288:H7JZAaFpeAqO3g/ALyYG0ZaDajTCXMO8xzDOe3Wy:nLpeaA/f0Za6TCXKBxmy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776002533, "uuid": "43081856-eeaf-4ced-8aba-2b02c54c23de", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002533, "uuid": "e29f2b61-9188-4c77-b403-fad5b1b23465", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "350cba11-3678-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776002533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002533, "uuid": "8c98660d-c571-4f25-8713-e59b00f99823", "comment": "Malware payload", "value": "dd3d3a6ad79cadac54de1c0dbe80a0b6", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002533, "uuid": "c23d0946-f643-4d35-b062-9edb03b2b378", "comment": "Malware payload", "value": "1e0d346bc72944712db8aaea9a6e51924fffebb66b23a5cdae0b51e896b17b63", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002533, "uuid": "923dd2cc-1eb9-45c8-a499-059f86735655", "value": "T1E8C4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002533, "uuid": "89d0394e-23b5-4378-a881-4a4934a8022b", "value": "12288:VMU+0xq75aS9iYIp6cP/G2Bku8VtNvC28c5/VTUPkYyq:h+J71vI/GrYc5/pK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776002533, "uuid": "5c22d443-5d20-457e-ab5c-e9c7e4b96b01", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002533, "uuid": "2f4ce63e-ec40-45bb-bca4-a8d9799cd793", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92082a9f-3678-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776002689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002689, "uuid": "c0502a48-de83-44cc-8a64-33b9a7966276", "comment": "Malware payload", "value": "edbfc7d34f2f7036af49dd8ca98b276e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002689, "uuid": "5925f6aa-af98-4ea5-bfa1-5fd3cac0ee79", "comment": "Malware payload", "value": "2ac1d2b88cc54421d577e692d83b378aa57ffce2ce717729cce53870ca1acbdb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002689, "uuid": "0e5798eb-fb8e-480a-b57a-76561dbe33dc", "value": "T1C18308327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002689, "uuid": "e6cc94a1-5c7c-478f-8a2d-b1a52dd5e83c", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnEWa1VN/:XEKltp9txAX/yr2pbEWIVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776002689, "uuid": "f92b1d64-45f9-48be-a288-b67f404ddf55", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002689, "uuid": "920a1345-b3c7-44ff-a106-1fc804853c2f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53d1dab2-3679-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776003015, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776003015, "uuid": "c782fddf-4b41-400c-a556-d1415c710a81", "comment": "Malware payload", "value": "9abcc1e14a62e304c0fc76e720dcad01", "object_relation": "md5", "Tag": [ { "name": "38-60-241-29", "colour": "#51224a", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776003015, "uuid": "aefac19a-f0fd-4728-a27b-f1d18eca9f7d", "comment": "Malware payload", "value": "a484c5f4766f049c6777970e3a4cf87ec7460472dc174e98268d1a3cd5bb920c", "object_relation": "sha256", "Tag": [ { "name": "38-60-241-29", "colour": "#51224a", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776003015, "uuid": "2145cfb9-e677-455f-910e-556f8139c85b", "value": "T1B98633FAF76FCD7F76A293794B1559D124A21263BBF83E02168553E88D12B5C2C309", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776003015, "uuid": "be7a7056-5be5-4b6d-80be-abcc8a26825b", "value": "196608:EKtpT2esobuLtC263UZf1g68bkBwVXepNAl:7tE+6tr6c1gLbkxNAl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776003015, "uuid": "ff7fe9cd-c6a6-4fa5-873b-541e37b925f1", "value": 8411223, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776003015, "uuid": "66641c55-f997-4b68-b442-e9e6e6e046c4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8caf1b69-367a-11f1-bc00-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1776003539, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776003539, "uuid": "c3abcd7b-cd8c-481c-b607-5d6ba016b787", "comment": "Malware payload (CoinMiner)", "value": "468bb936f2ec98034659301d1621f86c", "object_relation": "md5", "Tag": [ { "name": "77-110-125-145", "colour": "#9b583d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776003539, "uuid": "3513f5c9-600b-4877-8c24-5178a9c8e5e9", "comment": "Malware payload (CoinMiner)", "value": "72bb2e01ca126f936d500bb3bc05c575e6295a37806863cb556888b2aee8c40f", "object_relation": "sha256", "Tag": [ { "name": "77-110-125-145", "colour": "#9b583d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776003539, "uuid": "ebbddedc-3d2e-4b19-b1c8-2070fcc9c009", "value": "T12D33D9E4FCA8D93132348674F6CD9501F9A70A3B421A3514719EA81C7F3C795B1AEE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776003539, "uuid": "7e89135c-a93c-49f7-bc0d-09e2a9588df8", "value": "384:6aVKQ0VX1ibU72K8ZB4gmSOU3pWxTN+b4mUjI5RnTO5H15/ZhzcFLU7SWioxD5vW:6agQ9OEJ3Gk5RTO5H1FZSvr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776003539, "uuid": "79f77d9c-9fe5-49f4-9128-6233ce754ddd", "value": 50163, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776003539, "uuid": "f5355d48-0da8-4851-9b94-e299b25a9ed8", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6a81d0b-367c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776004469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776004469, "uuid": "b8430a9e-4ec4-4897-a7f8-85255be8c105", "comment": "Malware payload (Mirai)", "value": "6bc84816283687218d520013d346f192", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776004469, "uuid": "375309a1-3440-4d4c-9bf0-d8e0cb4a1b74", "comment": "Malware payload (Mirai)", "value": "e9626841fac35d69bf9346c9e4b5af80f41d2a57657eb97d108f26a644382c6b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776004469, "uuid": "e491a6b5-6dbe-4c04-b9f9-b0ed672f3942", "value": "T1CC3301F3B155A4F3FC9536F7294121D0AF2BC83FF69716534C84BE6AAC079215A220", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776004469, "uuid": "17761343-9bfa-4d1e-bc13-e44c38fe8cc7", "value": "1536:TXAuBsc5jloDQzKwZRFMRA3ucAp1Z+FiKqp:0Qsc5jlbX3ucAfZaE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776004469, "uuid": "f3694520-f543-44da-a04e-137b28ef5503", "value": 53464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776004469, "uuid": "09c4005e-3a77-43b2-99fd-8d414ddda86d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a49e6cee-367f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776005727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776005727, "uuid": "ccb0127c-dd5a-4c3b-94a7-1f37209444ee", "comment": "Malware payload", "value": "ac2cc31a1d9df67e857b0901b2e829e6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776005727, "uuid": "b6cc071d-8947-443c-98ab-eef10d545385", "comment": "Malware payload", "value": "d166e08abe1754af99a68b194882c49e129d75bc7e7bd9383103c9bc605bfcca", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776005727, "uuid": "a7fc85dd-a537-4b07-82d1-bc4473961cc1", "value": "T16893E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776005727, "uuid": "e8e84a89-390f-46d7-9fa7-b1dd80a00137", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPX/IH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776005727, "uuid": "fceb7418-98e3-4a10-aa0d-6f6d7ebb7ec8", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776005727, "uuid": "e5248691-276d-4b8d-8cd9-5d83e03eedaa", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7124b8d-3680-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776006188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006188, "uuid": "6cdf899a-97c7-4b2f-a2a0-aef8f53eeb55", "comment": "Malware payload", "value": "769115973d1fb8d65f4a76101d273615", "object_relation": "md5", "Tag": [ { "name": "43-228-157-123", "colour": "#ff1db9", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006188, "uuid": "23d2eeed-40d3-461c-ada8-f5f7cc46e8b5", "comment": "Malware payload", "value": "81eda518ff6ebb25e6aa8d626b78cd2eb6cb38b5d7efb34e021289e76993414b", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-123", "colour": "#ff1db9", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006188, "uuid": "586a0977-fb91-4830-ba89-baa94f785339", "value": "T186D51282E189A8DBE47A42B39C7DA4505126BE6DD079562F2493F62955F3383303BF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006188, "uuid": "4fd2a7f6-5bed-4d44-ad51-b4a6d1ccb346", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006188, "uuid": "db2180af-4926-442d-a349-7e1967caedff", "value": "49152:IGWhaJXOysh8slCRSxfljmffdDylwLrnDITMSbsTsuAihSezsmaD4r4F7Ht:HWoXOy2RCgxfmVDyynDITMSQT7jhSwTQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776006188, "uuid": "dac13ea0-c1d4-4c2b-9453-7a1d95feac89", "value": 2959360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006188, "uuid": "b41341f9-2e20-4938-b685-c86b2a27a5e3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f782a341-1a4c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1776006190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006190, "uuid": "d6f2a8c9-f27e-4031-9713-b45f91facee5", "comment": "Malware payload", "value": "b300ced4550e23bf3712d825095ac4f5", "object_relation": "md5", "Tag": [ { "name": "43-228-157-123", "colour": "#ff1db9", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006190, "uuid": "a449a84b-5d98-426b-bcc2-c9fbc448a274", "comment": "Malware payload", "value": "ea47cebe2fbbf06c22b9bd9b9d72dd4fe64aed4e68675aa5e693312a773e09e9", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-123", "colour": "#ff1db9", "exportable": true, "hide_tag": false }, { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006190, "uuid": "d2007edc-e8cf-4740-8047-4ee144689f83", "value": "T16EA633E0F584AFC1D121D93153F880A5FADE18666093DC62BC132F9E65936F3B7AE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006190, "uuid": "ed79a1fa-0843-4407-83c4-153926d05ba6", "value": "196608:y5+uWL63x+mb2ZYYLyIPVmzOcLqnDXBLmWUYQrpyhGpDHC0dzBGSc9CPZ8K7//4:zL63Mmb21uhOnn7FUNyhGprLz0gh8OQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776006190, "uuid": "809f9e49-1ef2-4ef8-8d4c-6c85c1d1e3f1", "value": 9525729, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006190, "uuid": "14a6e47d-0739-437c-87e9-e380e8c207ff", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8fdfd36-3680-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776006271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006271, "uuid": "be7d6692-25b8-4910-ab6f-7690b5e09024", "comment": "Malware payload", "value": "c575d422864efc7571a77295b730ecad", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006271, "uuid": "b6b7f4af-b4ea-4deb-8500-d7362c4399dd", "comment": "Malware payload", "value": "1ff46be0a55190d679e329151e8c0785bd3af5022e018d7960aa869cba391c25", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006271, "uuid": "3d3d2943-197c-4a44-9884-9a36f2bbf3b0", "value": "T1A9F314E3B2010A7FB978CC6B7E5649CA4079BF0187A4E1F2DBCA79959474382E1347", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006271, "uuid": "44246bf8-9a89-4622-aa3c-82b6c26f0eef", "value": "3072:yqLiZ16bsIOYvICXqV0Gz5q1lIPSDeKD6HLZl:szyYSk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776006271, "uuid": "2eb70482-c777-42cd-a863-5805e886225e", "value": 171137, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006271, "uuid": "e52eb533-949e-4d16-821e-cc604fe686b2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1ba1092-3681-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776006608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006608, "uuid": "cbd2204f-9a70-4071-ad97-0212b4473770", "comment": "Malware payload", "value": "2d438cddfc22d2f6f0b358f3e53ea33f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006608, "uuid": "f2067910-edb6-4606-b9ed-41ad1647646c", "comment": "Malware payload", "value": "67d6efa4b06898cf9b3be2023b18161cb8d16ef9e0ce72d51a27c43bbadd785e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006608, "uuid": "1d1577a2-1151-4054-b3af-fc9eb6dc9cc1", "value": "T13AC4238BA3FD845390BF1F58AA5BB48D091976F34722DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006608, "uuid": "9c25ea54-4c66-4df2-90d9-4491edb21129", "value": "12288:b+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byCH9I1P0QKw6FEM:b+QqldA/TSO713u7xnCH9IaQKHB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776006608, "uuid": "8e655d36-8990-44d1-a794-706d40804b92", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006608, "uuid": "149f51b7-7767-4e82-b532-c5d9841a1b9b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5c8c979-3681-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776006669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006669, "uuid": "5ef19741-7bb8-45cd-963d-4957dac185bd", "comment": "Malware payload", "value": "3f6c4d56f6fd319c6d2dc33299aaa1de", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006669, "uuid": "2b497264-d793-4872-86fb-b30ca59fb357", "comment": "Malware payload", "value": "ae3c56608eaec87e9fe1b31d410243b444b82d68902b1abd4cd41da6d0583619", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006669, "uuid": "c082b73b-fb5d-4bee-a073-dddad0f585eb", "value": "T1D93633CA79E0D2A6D15247F70A694E464ABDD48C7B8623BD218BF80C4EB1F34D73C4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006669, "uuid": "933ed608-047e-4e4a-a998-eaa7c4ac1486", "value": "636c9d5982666595cd584b52e3756328", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006669, "uuid": "d5ffc13f-0ac5-4f77-803e-7281382b438c", "value": "98304:OUUu8/cEgjmD3X/2b0FB/Goy64xwQYvLkcXHV2UW0a1y08qBx:/Uu8/cEgjmLNB/GoSxnIkaVaZx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776006669, "uuid": "9a09168a-735b-481a-887f-61d5689938e5", "value": 4966912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006669, "uuid": "04a56761-0d63-4397-8e1f-ce61c6876746", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6910f3d-356c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776006681, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006681, "uuid": "76515085-75a5-4166-b505-957e26f72666", "comment": "Malware payload (Mirai)", "value": "e17f40cc338c55602b2900740a2384bf", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006681, "uuid": "233cdc18-3124-4ca7-bf7e-2d21733fc116", "comment": "Malware payload (Mirai)", "value": "3c01145ed6ba3ada22abab16cdccabeac722fb6f6145fc2a316a10244790003c", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006681, "uuid": "be32aa65-e7a2-45c3-9bb2-e47c5ed7bfde", "value": "T10C82B0A01571EE31C3700876DA7D4B83329682EDE3EBB6357978028A73E605657FD2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006681, "uuid": "9da90a0b-54b1-45d9-859f-e48d7a6808da", "value": "384:e2ZK/RG5lCrKHIQ2RLSxrmaCB6yLwP/eJ3nNhymdGUop5huAh:1nlCr9Qe9LwOJ3Ns3UozM0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776006681, "uuid": "9bbd52a4-d87b-4815-9265-53f8ae0a75f6", "value": 18680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006681, "uuid": "2ec2651d-c134-4559-a96a-0e1f51298b76", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cddf7891-3682-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776007085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776007085, "uuid": "4f37f5dd-3965-4c08-8301-77e81c18aef9", "comment": "Malware payload", "value": "e8ea2a65fddd52a17af97c4b68119942", "object_relation": "md5", "Tag": [ { "name": "196-251-107-133", "colour": "#dafeb8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776007085, "uuid": "11baa41d-e4f8-4adb-98e9-740c4d91f0da", "comment": "Malware payload", "value": "d8e382a853e43096d94179955954165c8b688727b6d3b1d54b3fe3948ccd4564", "object_relation": "sha256", "Tag": [ { "name": "196-251-107-133", "colour": "#dafeb8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776007085, "uuid": "2b3489c6-e119-42bd-841b-990506ee8bf2", "value": "T12031D2C9176244756ED69FA7B1A4C934B488F0D6ACC4DE84C5EB38FD894DF087C41A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776007085, "uuid": "e8ee57ff-3f9d-4087-8bb7-02143785e3bd", "value": "24:vXROSlIOSKuwoOSBpOSUOSElGOSOOS5eOSzOSyz9Ol:vhR6RKgRBpRURwGRORARzRce", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776007085, "uuid": "0fcafbee-ca21-4f43-8742-17d3300da4b4", "value": 1803, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776007085, "uuid": "5d3390cf-8782-47d7-b2b0-fd81972fe55c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecced14b-3683-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776007566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776007566, "uuid": "f18a1de7-0679-4eab-9367-797661afad70", "comment": "Malware payload", "value": "7fe1733a4dd8308d7b562bfdeea83c80", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776007566, "uuid": "fbdc1ace-81a1-47ef-8d54-e9cfbe0a1a00", "comment": "Malware payload", "value": "1d8be15c053ec557976f28f5db6f001ac901b46534897d8ece9a21c737484eb8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776007566, "uuid": "1b4d821b-96fc-48dc-99a2-76948b734b04", "value": "T14F772373F728CA2FC8BB01710CAB7231661A5E15CE82E35B6908775C7A779D41E88B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776007566, "uuid": "8081609a-de48-4a2e-addd-418e096313d9", "value": "786432:78zGthrhIOzD/mSFTq+P9oT6H3bI/5zXuT3Z49X+EQzoEYNZ:gzMhrh/3Xq+P9oT6XbI/5zeTmYPz2D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776007566, "uuid": "43dca208-5584-43df-a0b6-dbdadd832d14", "value": 34661069, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776007566, "uuid": "025767a9-4e96-4e02-bfbc-410e9daa59ae", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adf6deed-3684-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776007890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776007890, "uuid": "79a8f36e-adf9-4e9c-9e20-b66360a1caee", "comment": "Malware payload", "value": "801e80493f6bfcdb9cc78f802383fbcf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776007890, "uuid": "aa33d97f-c4de-43da-b4a5-fd2e865a6cd2", "comment": "Malware payload", "value": "416a9ecd3289b02531f8d422687118e6c667e82a9f7dc758c6792b3b5d2b82eb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776007890, "uuid": "8afdb0cc-1caa-4c47-b44d-26d1e72fe0be", "value": "T12F931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776007890, "uuid": "b9a3eb36-58de-41db-a671-e6fe3ed3bc00", "value": "1536:0Byp1tF/uwMmAIa14oXx+IMepeV7tb73WdxCrCitkb5fv2v05xsprCKL1sPyKrt8:08jIL0GitkbFv2v05xspr51sPyUt3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776007890, "uuid": "ae4553d5-0503-49b8-aafe-9cd32fad69b9", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776007890, "uuid": "dd1f1b05-9db0-4fd9-94b0-e50e1c542480", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1f151c1-368d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776011736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776011736, "uuid": "3074d141-4c3d-4eed-9c5e-98739e55676d", "comment": "Malware payload", "value": "357d6538c0e3eebb9c83f1c71373efe1", "object_relation": "md5", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "clipbanker", "colour": "#5efbe3", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776011736, "uuid": "220d3d5d-4913-496c-8bfb-bece491c9dac", "comment": "Malware payload", "value": "7361a2d5e2e3280af983341a686791b4ba42eedd0391a45d063ae6cda2b6a488", "object_relation": "sha256", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "clipbanker", "colour": "#5efbe3", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776011736, "uuid": "e45cdd68-3431-42c0-a812-efef486c4637", "value": "T1FFC5E28D775D41ACC56244B210F10A92A7B9DB16A3E85E071BC6CC788E120DDBBBDB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776011736, "uuid": "d67ccc94-6828-461e-8f80-903dfbaab084", "value": "f4ba5888735f8f49bcf1bc06d1716904", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776011736, "uuid": "b7ac435c-995c-433e-8afa-d13f7314d689", "value": "12288:diwtWm1x9GuYsl4wcxOSKyiG//87gRgYafcCxlNv//8G0pDdly8ECd9EgenPvqfy:dnxoml5c6yiHCPc/5vXL0pCC0gePvqf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776011736, "uuid": "fc049b8e-801e-4033-a595-e561a88bdaec", "value": 2696704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776011736, "uuid": "348bdd18-d45b-4c72-9b49-9c2c797dd267", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "175fffd3-3691-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776013221, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776013221, "uuid": "ff567e73-5274-4ade-bbd5-1b80ca1a1b04", "comment": "Malware payload", "value": "7ae5e6a53b8e6999fe80f7ae075a01eb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776013221, "uuid": "6c9a9cce-4501-4d7a-8f13-c4b3089b3a53", "comment": "Malware payload", "value": "3b501f1509aa68a8c9780fa70c99feea17293a45c8a757b3ce4b8f664cc7652a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776013221, "uuid": "826ab363-b3ce-4e6a-80f1-46f0e690e1d8", "value": "T10485318AF603ED4BE3C5E8348825DA76526637BE97F348B9BC5CB5D8F21A5533014E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776013221, "uuid": "fb30b5d2-5d27-41a2-9ad1-f2e6f4300256", "value": "3913a61afc7b8099cddac314b48d90cd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776013221, "uuid": "d2995196-48c8-47ed-9f0c-25510ce0f69e", "value": "12288:9/LzDFuNup2G3xm3/CmiiiUY3YQqLWQc0qpb0qD0xc:4uVxWiiiUY3YJLnq2qDF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776013221, "uuid": "5a93c934-606f-45d5-8a61-b19a8e8e8f86", "value": 1857024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776013221, "uuid": "4e5498b8-5702-4364-af8d-7350eed6298a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2545aa67-3691-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776013244, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776013244, "uuid": "4afd5a5e-aa12-45e8-aef1-4f738baf6ff8", "comment": "Malware payload", "value": "5f32502cd98d09674342a46b005ed180", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776013244, "uuid": "1118c662-dea3-4c77-ba4a-22e536f3a93e", "comment": "Malware payload", "value": "c11639fbd63daba3e041f54a6ba5fe6798e477a1ffd5f7f6c1d254f6abe9348d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776013244, "uuid": "c7a918f8-9654-46ba-80b9-036e9602f1b3", "value": "T16024CEAC6AD71FDB0695466997C8BA8B939F36F687A39C353270C29C73C0319C5319", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776013244, "uuid": "1efcbf97-c8c3-47b7-8de3-6f6d409feaef", "value": "3072:1RqVlCcNxGwlph3HCPZ76U5dZXGxKQ7i+Pz0KmHRGzMyCAbn0WCrR6q1Oz7g6jb:1RM/xlybDXmKL+oTHQMrq16R6qU1b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776013244, "uuid": "de9fb68a-9d54-4328-9090-6e3f58067743", "value": 213091, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776013244, "uuid": "9c253540-2295-4763-bc29-4c077f7b4d05", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3f68e56-3691-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776013484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776013484, "uuid": "ebc5ce40-5321-4895-a9dc-6dfafb1a5372", "comment": "Malware payload", "value": "8e3dac4805b46eca2022b2b8188b5c8b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776013484, "uuid": "cd92a003-df64-4fff-bf91-be63e3484efc", "comment": "Malware payload", "value": "c3ed8e91db1e8b9c059348c3062abd42b7958cf68ae25dac628a5192b881dac7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776013484, "uuid": "b542b6ab-c074-483a-a52e-e365ce424193", "value": "T1C4330B72B640A437B43F98D866690BAE30E15509DD034290FBEC9375CBC6DF37E21A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776013484, "uuid": "0ae081c5-4dcb-40ec-9164-1bd39af510b9", "value": "768:jFzMbLq7enJDRj2Zi3il5IIu+DCTgK8aFHY7eYE2My0bEFtU2WQ7Mr0:AujxIIu7TRFQU240", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776013484, "uuid": "479f16de-0618-4588-9f62-b8830ff94663", "value": 53628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776013484, "uuid": "c5af7a30-604d-4008-8d4b-5c470fe937c5", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4195ae4d-36a2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776020593, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020593, "uuid": "494f4774-0f6f-4306-bba5-7d12595eac85", "comment": "Malware payload (Mirai)", "value": "e6c4bc692e7a5bfb2c39f062ebd286d6", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020593, "uuid": "fe06ec7d-02b8-48ec-975a-133ba7a49def", "comment": "Malware payload (Mirai)", "value": "0baaba865e4b0dd71476f2014ad966cfe380cd8bd89ae7f41689775c55389fa5", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020593, "uuid": "1e734da9-c35d-4ebd-a6a1-343da7fa249f", "value": "T1E4A4D159F24B2F42C8D7D9352446C1458B56E96733F383497F8368BA383D2B68F287", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020593, "uuid": "6d091c72-38e5-436e-afa0-97f734e94ff1", "value": "6144:tRX4DUccXxf1mjIohMcucn4q/sdwv0Vteuny4MDVQkeQHd9r8pbwRXv:L/XgIohn4qRv0eBxVQkeQ/8pbwRX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776020593, "uuid": "d3bdfae3-c2ce-40b3-95f4-f4b36f9a4674", "value": 465600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020593, "uuid": "472374f2-27f1-4dde-985a-3cb2930d75d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4309bba4-36a2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776020596, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020596, "uuid": "3b255481-fd89-4d81-bf4a-61de8e1efdd4", "comment": "Malware payload (Mirai)", "value": "41ac84848b5e44936d0c72dfe2fb2ee9", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020596, "uuid": "923a73ac-e989-436b-9191-543f850779b1", "comment": "Malware payload (Mirai)", "value": "48b7dbee0e53fa4cb62959cde8b2594dd6716e1b385fd4e05df87a1d5e285c43", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020596, "uuid": "c4acd90d-0bc4-4da3-8067-d54a7092c934", "value": "T1AFE48D9AFE0E3C42E3D7E37CDB4993A1A22B35E1D32351627942030DD5D6AE9CBE19", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020596, "uuid": "01a45500-4e86-4189-82f7-42efc712b7b3", "value": "12288:yD9KUVi0tg0rNq48W0d5iMSZTl/eqhEv3IYs5htBs3U:yZKUC0Cjd5iMyDhEveG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776020596, "uuid": "f41b75cb-efc8-4b19-a2dd-555a5a05a4b5", "value": 690608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020596, "uuid": "05654848-92fe-49ac-b911-d489b7a0f5be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66ba9502-36a2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776020656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020656, "uuid": "66710f90-7595-4f14-b07f-bfb5241deb2c", "comment": "Malware payload (Mirai)", "value": "3754729e9834045cccff585fef39fcae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020656, "uuid": "c2b150d7-2da8-48c0-bf18-4fbeda1d8910", "comment": "Malware payload (Mirai)", "value": "22b1b5397ebf2832b9df17a5a96dbbe94cf875ba238eeecc3ffb1bd6637584f6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020656, "uuid": "0bd3b51b-e630-4e2a-8cce-976604e405c0", "value": "T195D2841FE2A0DE3CE8C4F3745A9FC1218160B0F4AB32615F6A40A5F73D867988679E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020656, "uuid": "4227d4ea-3889-41ee-9d51-69ec0f0353fd", "value": "768:mqAqdVtl9YQog4wIAYQog4wIAYQog4wIAYQog4wIALjbzrD7TLs1yP4xeXo:mXv3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776020656, "uuid": "0ba83549-5cb5-4abb-a5bf-1ed3a8f9c382", "value": 30648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020656, "uuid": "c1b824d4-27b4-4a17-a1ee-cc0220838be2", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66c416d8-36a2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776020656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020656, "uuid": "4744081e-262d-48d2-b8a1-8eb143ca038a", "comment": "Malware payload", "value": "593970c280f1c05fabfda76c428cfaf2", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020656, "uuid": "47c649a4-81a6-4a8d-931b-15981b082356", "comment": "Malware payload", "value": "8e55172492201bd8fe69e62f53812922b2b8c834aa26b00bbc6c40012ff4475c", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020656, "uuid": "70099a49-cef3-4bc7-8d04-06d8b31019c6", "value": "T1C1C08CAF00A904B228AC01B221005280A3B1981318820B1C7888B8A1802DA0CE0127", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020656, "uuid": "8ca9edf5-b11a-4dc0-b085-57e35ed950c5", "value": "3:QnQza1KKjvDdFd0hTLTeUWckXKIbXdd0oOdvWW1VzWUFIpdvn:lOAKjp0hfWTNd0YWad", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776020656, "uuid": "e4116349-de8d-482b-b265-5ee87db02917", "value": 140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020656, "uuid": "0e5b0850-3117-4d1b-847b-2abb367ce17f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66da1ee0-36a2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776020656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020656, "uuid": "135e851f-bbb4-425f-a351-71ea0397733d", "comment": "Malware payload (Mirai)", "value": "40ba35f3bc428dc479ad5aee21a62ab2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020656, "uuid": "991bd7aa-b960-4a7f-ad2d-d98afb64d34d", "comment": "Malware payload (Mirai)", "value": "c6977c38a937833a56a6e9dee743c43b7e1a1abf72d84b4cf4c6a1dc604a0f14", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020656, "uuid": "f2d1bd6b-3481-45b1-ad32-e2ac32bdef30", "value": "T1DD054A06EF445FEBC46FCD70492EC31B11EDE8D756D1A62A71FC4A8CBA5D24A0AD34", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020656, "uuid": "f7dac972-1aa6-4174-b1f2-8dd70bb5e134", "value": "12288:c4f5BkR2ZGYbv9ZfJsnynysclHY/9hU1aFExVBODVPsHLv/N4QXtYLkSAaPdKIWU:cUr7NWiw4yaDoCxJyEPnp/ND", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776020656, "uuid": "40689b91-0092-4d14-b653-05d42ce5f460", "value": 809020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020656, "uuid": "0bee909a-a1d3-4e25-813a-61b67caceaa0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66e1605d-36a2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776020656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020656, "uuid": "0bd7f3f3-159c-4339-b902-1d9f7df3a657", "comment": "Malware payload (Mirai)", "value": "4019196f62ae30f8cbe72f39d6708de7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020656, "uuid": "45165ec6-99ba-4416-a9c8-052cf937eaa6", "comment": "Malware payload (Mirai)", "value": "e2209ebe053639731e9b7cd4f31ce2b7af42d784f66f3b44227f9e567e1985e7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020656, "uuid": "a55b4779-05ce-4a0c-98fa-208b2e43dc5d", "value": "T1DD154C06FF405FEBC4AECD30492EC35610EDE8D796D5A62A71B88B8C7A5D31A4ED34", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020656, "uuid": "8c74841b-9cf9-48c1-8582-ed7279f1e7a5", "value": "12288:5/wRedTz247uZgrMI0y3Kx1/PkinLxisuZrfpmiDaI4oRUxRXNPIlKulR3Iffh5f:5IkrMINQ3kinogIkISB5PAl3N2q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776020656, "uuid": "b3d4a987-3689-4a25-b13e-f757398e230b", "value": 883168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020656, "uuid": "679ec491-bd08-4ea7-8db0-8066cc06f9e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b667095-36a2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776020663, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020663, "uuid": "d6be7935-0cd9-4164-abc7-7f3c55dace51", "comment": "Malware payload (Mirai)", "value": "ce8ace1775fbba214502170aed6dcbc3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020663, "uuid": "c45c1606-ba03-42ad-9607-dd9f63f9532f", "comment": "Malware payload (Mirai)", "value": "5073f18d5b8b7f98e7fc8159c81d4b7bc1e744714a424ed292f2e54e5e352003", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020663, "uuid": "5189bb9e-ce8a-4f54-ac42-a6be1844ec6c", "value": "T198E5F81F5E319F6CF7B487344BF34A34E76A22D617A1D980E1ACD1085E6025E681FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020663, "uuid": "2064cc9a-5721-422f-9fa1-4c0a9f983e3e", "value": "24576:BwKu0rTYj8xlxZMeLfLFa1NGDdW5pxhPW8aDHCywkbQXLDM/3endz1TrHrgeUtIp:bue2eVMcuxhPWoywk+l0t/YvPigYI0q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776020663, "uuid": "fc897849-a429-4a97-9c31-1b4687e64d37", "value": 3168508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020663, "uuid": "2fb3c926-473d-407c-b7e3-20502c1c67e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0224efc7-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776026057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026057, "uuid": "6090b03f-9fa6-446a-830c-8bb32faa6937", "comment": "Malware payload (Mirai)", "value": "a24aaebee3f44f87cd6b151098858b09", "object_relation": "md5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026057, "uuid": "667c8e90-b1f1-4fe2-a0e9-081cf4a6d4d7", "comment": "Malware payload (Mirai)", "value": "70f0c5b089d59143fcadcca06d67dbbbfe4a4136270fe714ecfeb28bd302e249", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026057, "uuid": "5c2a2f3a-0ea1-44c5-90fc-a85f7f59ac28", "value": "T1DB33391295BC1A2BC4D4AB7701A74363E1FA2B9541D4E64FBD220D4FEF583502ABB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026057, "uuid": "45a1f575-5051-4f66-af16-0dac0ba90fbc", "value": "1536:SK8kL18buuQJHtK++mmyuSquydBQdSM4pKrt:S/F0YZ6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026057, "uuid": "8b27b3c4-6ba4-4183-8972-3dc72020f8bd", "value": 53668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026057, "uuid": "8711b559-3157-420f-835d-63d27ef7de4d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eb54223-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776026116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "1b55cf51-4ace-4ac4-bf7a-19d870c1c5a5", "comment": "Malware payload (Mirai)", "value": "a590a06c18e1e25cfc595b3e6477e8ea", "object_relation": "md5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "7180ff46-6105-43ed-ad68-ca46e7dbc3e7", "comment": "Malware payload (Mirai)", "value": "1c544f9b7957bbae75e0bade822be8f3bf3e8bb84c266804996f1b3c516c7ba9", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "7c874a68-a4dd-45f4-9bb4-429e36130e3c", "value": "T1BC432B91FC9245AAC7C117BA771E978A33626369C2CF7313DC080B5076C9A4F4E67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "29eeac47-6f2e-49ee-8033-0d6d459b46fd", "value": "768:j2uoWsjpIE9StBkNxCU8d+b47DdZVOIr9QKw54u8OMb2FX0npzJk6:jABjpIE6auz8UDXcIr9QKw1EO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026116, "uuid": "21145f5b-720b-46cf-949b-6497491e14cd", "value": 55308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "9ed7b541-8c31-4a8c-8e1b-9f795aae55fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb9e2d9c-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776026116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "61b37d18-b2ee-4164-aea2-c74947cd1cc5", "comment": "Malware payload (Mirai)", "value": "d4196737cef8a31b771eca9b9b8f17cc", "object_relation": "md5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "53f27973-9a73-4b7d-8cdf-d783a40e85c5", "comment": "Malware payload (Mirai)", "value": "9338d333f4e41b794b52355976060e9216fc8916b6753a2f9f8991f17e2eaa7b", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "2708bb86-2e7d-4726-bddc-f6ab5bea1a3f", "value": "T1A0935D02B70C0E43D1675DF02A3F27D1D3EEA6E121F4F688691F9A8691B2D335586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "4b39507f-e05f-4a40-8876-9af874442c9c", "value": "1536:GFsCCOHrTgbrkkoV4SKUgZ5VvHfNaoY04M1ykpAzKY3uVetMuXyCQ7sIER3BfG:LROHrTZkoqkGTAzhRMVC0UG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026116, "uuid": "87198bf2-5c8d-461b-bbe1-f82530351d50", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "b13b9f3b-7c8e-4bc3-87fb-30ed4cee265a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff403ec6-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776026116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "cc4be2d5-fd32-4359-995b-5de5547e3629", "comment": "Malware payload (Mirai)", "value": "fc2c4ad6f71eb9550564cffb79d9f6af", "object_relation": "md5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "356d12d4-5dcf-4c6f-acbd-b911a6d64e7f", "comment": "Malware payload (Mirai)", "value": "9627724833a50e015b91353bf94ea78089860b9189447ba59c3e8231094982ad", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "18a5cca5-ba47-4954-8975-651ad4ccfb19", "value": "T12CA34AD7B401DDBDF84ADB7B40531906B131E3A20A831F36626BB967F9361981937F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "b444e0d5-92e3-4f12-98f3-6facba895e7b", "value": "1536:9PMpxBl0//5Su3gtVfd4zsTYCkrr7o8zWA8T3OH6iC2J3m8Ry6KG7QIeW4N0XQ8g:n//H3gtVlu1H7o8zWIP3mOyZe4N0X5g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026116, "uuid": "8a1a9145-da4f-4457-abc2-124ff916d6d4", "value": 99704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "569c5712-9604-40e1-aade-b86715079aa8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff4334bb-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776026116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "1c3a1ec8-55cf-4094-bff7-019d71cb2319", "comment": "Malware payload (Mirai)", "value": "eee98cbc8550e607e3f05794b178aa17", "object_relation": "md5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "618eb024-938e-4170-8c54-81031f832187", "comment": "Malware payload (Mirai)", "value": "931b909773d77ce616e5eeed1751354f3be255b3bfa77578e0db82f70bdba43a", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "82c098c6-30c4-44ec-9d5e-f850878e4bc3", "value": "T1EC933952FD818662C6C126B7FB5E028D372653A9E2EE3203EC156F2137C795B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "29a186d3-b785-4843-8a7e-32d80774ea35", "value": "1536:jxbuV/oeWRynbOAtom7xGJaJa44Bx8ySAN9TwxJSCJonP9eJCQsP2j+ks:jxbuV/VWRynb57uHx8yRtkSC6CCQs3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026116, "uuid": "c5e06ea7-9b05-4a9b-9028-761f9f14708c", "value": 89716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "25aaae61-f8c7-4f16-bfad-78ce77b3d449", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43250a78-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776026116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "1ea37f94-55eb-4680-89a1-c658cbace72f", "comment": "Malware payload (Mirai)", "value": "f0455df8f701357c01eab9c0d6294f31", "object_relation": "md5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "3464717e-78ca-4020-8624-0ef2beabfa66", "comment": "Malware payload (Mirai)", "value": "8417676d023b2de759904e051da33a0028b18f9626cf70f20af862c0845ee759", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "7a7bd8e0-ba0a-49d1-a4e9-3eced17edd86", "value": "T142935A53B9C480FCC849C17057AFB236D923F17E1239B19B67D8EA167D8DE111E6EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "6cb75641-6352-4bf5-b8f3-390e4085ea87", "value": "1536:lPfYtYZjnRc/6UTgUdQN87B87yaAQ01B1ks/Vyec5fwlLJH27ySHA:RxZjnudTgUdG87Ayaq1B1ks/VW5fGLoE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026116, "uuid": "cd56b0f5-21a7-4db3-9b29-b0a2ab8b63c8", "value": 88928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "39f06c9e-e080-4dbf-8b0f-116ac4dd7be0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02274dfd-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776026116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "d4e02a18-23f6-43cf-90a3-5cb354b917ac", "comment": "Malware payload (Mirai)", "value": "fc98dc6939e097e3e23f78366040cf57", "object_relation": "md5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "61799763-e8ab-405c-8aad-eead568ae851", "comment": "Malware payload (Mirai)", "value": "e7d9108c3c3a5a5c7c21627dab473da9f95cf8f5947b56f3d20fd7e2acde7de4", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "093f3ba2-37c2-463e-92b6-1cae2cd210a2", "value": "T11A839C33C93A0E68D84845B4B0B18FB65763E51581972EF7499AC63AD083EDCF58A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "a0c0668a-aa82-4222-b01b-589030732054", "value": "1536:lgynxf8zTG9xM4AefRQKRPLSkC+RCaR9HnHyW:lxnx39GcR3RXC+Rvdl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026116, "uuid": "893ec8f0-75db-41d0-b262-60a51cfedef1", "value": 83812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "29891640-03d1-47e7-9b17-fc5c7edcec17", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02232835-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776026116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "cacf4ab2-ee77-4fdb-b4e4-064fbc80435e", "comment": "Malware payload (Mirai)", "value": "08032b4259310ce451b4968ac0b814a4", "object_relation": "md5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "2f7e504b-da11-4fdb-8f5d-0a067c131f92", "comment": "Malware payload (Mirai)", "value": "c6fa6befa00083e6f63fb21de0aef17047079534f31c7956e429071c11dccb61", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "69e0a6c9-d912-4b39-a874-ccfb3819f82a", "value": "T103837DC6E743C0F4E8528973213BE7328A73E53D102DEE83D769A932ED12541D66A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "9124442e-a699-4d88-87a9-cae28cc16ee6", "value": "1536:bAxTtfhenc5SWhp9ClAIVVk/13HWCsBjJe7s4TtABV:bALIuSGp9ClAI4/13HlsBdarE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026116, "uuid": "3e2efe3f-c2cb-4931-990f-981d88bd04f3", "value": 80880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "2458ec19-4cfa-4d40-b489-17919840ecbe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff37819f-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776026116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "8a6a62b3-faa5-40b3-b17b-635d108f08c4", "comment": "Malware payload (Mirai)", "value": "df0266ed4fa163135a02c657518ab828", "object_relation": "md5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "97c1d3ad-abf5-41fb-8f62-43924b982580", "comment": "Malware payload (Mirai)", "value": "0cddb8c8a70b498bff911e54c54f2101f666486de3eeb8e2359eb425fe355d40", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "b1806719-6624-498e-aa99-28e398e794f6", "value": "T1FC432B91FC9245AAC7C117BA771E978A33A26369C2CF7313DC080A5076C9B4F4E67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "d3aff205-9507-4e63-9e80-c3e3c847be44", "value": "768:yuoWsjpIE9StBkNxCU8d+b47DdZVOIrdQKw54u8OMb2FX0npzJkr:MBjpIE6auz8UDXcIrdQKw1EO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026116, "uuid": "19391944-2a88-4de9-a930-28fd96a29836", "value": 55308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "344afd2d-a0dd-4da9-8e47-c736dec42782", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "021526c7-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776026116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "5b2b818f-4fe1-4b60-98da-c1e49abeeae2", "comment": "Malware payload (Mirai)", "value": "f486490f80292bbe05f7a596f18d69d2", "object_relation": "md5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "76bcec2c-5e82-4798-b560-8c5bac9d2bc6", "comment": "Malware payload (Mirai)", "value": "0ce082b52d7e17bde880ce0eabfa345c47c0529afcf94226bb1c097773c44943", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "625f1964-a93b-4b86-9004-d132f2f9e7e9", "value": "T1C9C3C74E6F218F7DF368873047B38B25A75933D626E1D685E2ACD6005F6034E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "f19b5a4e-f0c1-4354-afa9-5a3236c6110d", "value": "1536:Y88hVKLkQwe4eyJjkKFZITjPCLku7wpa5wU9a7w+8OyOADea2uPNKpslW:YtVKLfwv5kOM+H9a7wyyOATN7k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026116, "uuid": "eb307389-8e36-4b7f-92b0-5a9af3d26270", "value": 118400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026116, "uuid": "76b3471f-4b17-4569-a51b-bd7e57943d87", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff3c0c4f-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776026118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026118, "uuid": "af335285-611d-4fbc-bfeb-ca43e95d86fa", "comment": "Malware payload (Mirai)", "value": "df0bef96d0c2e6c26fc7b560a7c579dc", "object_relation": "md5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026118, "uuid": "cd786bf0-79dc-4fd4-80a3-3d88c5f02452", "comment": "Malware payload (Mirai)", "value": "435b581583f7f42138e67bf16a7bedb9e7edbb321806daac96be7f171aba0737", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026118, "uuid": "2d7d2e49-6955-4721-bc97-8480ad27205d", "value": "T15AC3F909EB614FFBE86FCD3746E90B0525CC551722A83B7A3574D828F64B64B4AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026118, "uuid": "8aa79d6e-1603-48ea-b040-141f9c6e309a", "value": "1536:1NyKMWFSdRBVf+g6z3jL3JsYRX5sLuYk+ot2Le8hUK3ZanZJeG7r637oFW7MnS0P:HyKMWFIZ6TXQKK3UniG/L6rLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026118, "uuid": "89fbde63-c4a6-4b0d-add4-673f95e5d366", "value": 122496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026118, "uuid": "2d2ae191-2e08-41bc-8bc7-d558cfcc10a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff323ee4-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776026118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026118, "uuid": "0e5c482a-5a7b-4bbf-9513-a60b2514b043", "comment": "Malware payload (Mirai)", "value": "88aacc52cc00c0d143686f3fbc30bc1a", "object_relation": "md5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026118, "uuid": "ed939c45-38dc-4c40-bf75-0137fc5bad54", "comment": "Malware payload (Mirai)", "value": "9e675e03d343b36b8b54108679c237b7097c3c9db7ebd41f7ac554bf67889f58", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026118, "uuid": "bc945941-6837-4198-8f78-a6ac48a97da4", "value": "T1F6C3ADC7FA8714A1C46206F003C71BAD6F93A221CF5FE4E7AC1DB63B5A7A4DA15163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026118, "uuid": "3a277113-93a3-4116-8c90-67377e0e510b", "value": "1536:KrMjtT/2h9gdeHjV7uXwHlWuoPpsiUckl9kyVcMxs5RpgRCEy/LWZ:KrWT/i9KXwFn+jUck4yVclg8q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026118, "uuid": "3064e4d9-b984-45c2-8aa6-78419771f882", "value": 124676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026118, "uuid": "4a653322-f777-4030-83b0-4bc0f338dfa1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd6013e6-e477-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776026118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026118, "uuid": "a744990d-bfab-424f-81a2-95f4e1cd149b", "comment": "Malware payload (Mirai)", "value": "98fda6722231a7ed6ff01c25c4be23c7", "object_relation": "md5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026118, "uuid": "1587062d-66aa-423e-b4ce-ee72c60ce42d", "comment": "Malware payload (Mirai)", "value": "538b1cbce4efc20a2d4edcbb44efb71156279bed31a9f42b07e950548f7e83d6", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026118, "uuid": "d3dba2a2-ae02-4eb2-a610-489535c3e419", "value": "T167936C42B70C0A43E0575DF02A3F57E1C3AA66A120F8FA89790EDE4996B2D325547E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026118, "uuid": "f0728121-4934-4d4f-bf40-154dc1a44d96", "value": "1536:aDbQbediuZ6mJYRBNS3LJEr0YN7OQqTzp8asfFzmge2MP0l1WrSlfPp+tID:wQEI4TzGame2MCWr+ND", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026118, "uuid": "d6da605d-9661-40f8-86c0-dd724df86d73", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026118, "uuid": "e3f04f33-b0b4-4ddc-aa2b-1adf5671a171", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff454676-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776026182, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026182, "uuid": "a39da767-fcbd-4de1-baec-48919245ddb2", "comment": "Malware payload (Mirai)", "value": "255e1a0a46ba7980778e329e30c80fac", "object_relation": "md5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026182, "uuid": "c3ee9299-0da9-44ba-8357-451f1c85d59f", "comment": "Malware payload (Mirai)", "value": "c21fee2611a33c3b8628fc24f9718d46e0f8df975a2837be6b641d754365f1ea", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026182, "uuid": "853415b8-58fa-4e27-9695-9b68d6b927f9", "value": "T124937D85FB83E0F0DD0609B011ABF7798A31DD362024DD6BEB98FD76AD326129116B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026182, "uuid": "8db06e6a-1897-4658-a128-b58aaf0e7348", "value": "1536:JUj89KwKFRAXmDRDDCczE7JoQ4z8GGIYqoBcQaU331QUHLaEiKixr:w4KFRA2dDDCczE7JoQ4I3xuiG1l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026182, "uuid": "d0c4bb32-f1ef-4517-a614-27fed2be4b9d", "value": 95444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026182, "uuid": "b8ad6ced-4075-4636-9372-c0e29a360013", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "021c31a9-e446-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776026182, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026182, "uuid": "66ca2c77-fe0a-4e81-b6e4-4feb8ca85760", "comment": "Malware payload (Mirai)", "value": "b753c963837dafadf2b433be0746da41", "object_relation": "md5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026182, "uuid": "1dacb90c-c306-4dda-aa1f-68af225d045d", "comment": "Malware payload (Mirai)", "value": "2696eeb4ffbce47e4685743698a8d0be93714b2b74bb45187a39b859943189af", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026182, "uuid": "796a9b5a-d1dd-4321-962d-492c576f4140", "value": "T14A933992FD818622C6C116B7FB2E428E376713A8E2EE72039D155F2137C795B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026182, "uuid": "c3240388-2354-44fc-9c55-31349b1253f0", "value": "1536:Q5cCxUV4w2eQpemBLn1l0+Mi3DbP194EBqNmvYEaLAr1ocMtbv6aIA:Q5cCeVhQpeAwi3DRGEQNmvdpeB6A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026182, "uuid": "ccbaed06-bec8-49e4-9cad-430c3dde9d69", "value": 93228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026182, "uuid": "c451078f-5b28-43d0-a691-fa59e4da9424", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb99f77b-e445-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776026182, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026182, "uuid": "6eaba17e-d2f3-4b4c-aea1-3651c738a78a", "comment": "Malware payload (Mirai)", "value": "e422435a52bb0f3fe97428c687567b4c", "object_relation": "md5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026182, "uuid": "10e2413b-6864-4b83-9480-025143a1415a", "comment": "Malware payload (Mirai)", "value": "8c90012c315f28a76dbb7d3599a36302391377a4ac88663ed5e91f2ac27bac3b", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026182, "uuid": "5110fe3f-3224-472b-8ad9-8b9bc245c50e", "value": "T1AF8339C1BA4BC0F6D9174830806BF33FCB32E6394065D25EEF6A9E65D93364256263", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026182, "uuid": "161ab836-60c8-4b1f-809b-d3d3ca8e72f5", "value": "1536:q1BK59Eb0SI7+rRgoXWAcanWiaSyzRigopFXKShkRL:KBU9EVI7+1zXWnplzRidpVAL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026182, "uuid": "30876f87-cc53-4786-abe6-1a7a8e35abdc", "value": 87696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026182, "uuid": "a8d009c6-d7d3-442d-858c-9b9c54ac05c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c7fb763-c1b1-11f0-85ba-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1776026295, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026295, "uuid": "116d4602-2c1f-4952-a1e2-e650b45b78aa", "comment": "Malware payload (CoinMiner)", "value": "ebbf199c7813577f72daa241d9fb3398", "object_relation": "md5", "Tag": [ { "name": "46-151-182-82", "colour": "#bf0f8a", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026295, "uuid": "86d4a236-e864-4ce4-8d62-50274e64f745", "comment": "Malware payload (CoinMiner)", "value": "048e374baac36d8cf68dd32e48313ef8eb517d647548b1bf5f26d2d0e2e3cdc7", "object_relation": "sha256", "Tag": [ { "name": "46-151-182-82", "colour": "#bf0f8a", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026295, "uuid": "972e24e8-e4ed-4a73-bb90-e429ef2bcc62", "value": "T1378533346A465C25267B0FF4809531371CEB3AF7210AE5864E8E7CDD821561A92BFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026295, "uuid": "41b78f5d-abda-4493-aaf4-279378015add", "value": "49152:1LtoMxTuZCBqOoEVx8y9y3p3EesY603jBY:foMxTSIqOXVxfqp3Erj0zm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026295, "uuid": "7085f4f4-bb84-4536-bc16-6a57e58a2ed0", "value": 1748196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026295, "uuid": "ecbb2352-725e-49c1-92db-20e4c1c77121", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01986b2a-1f80-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776026295, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026295, "uuid": "85723191-b890-4623-8cf2-a96d4e4ca61e", "comment": "Malware payload (Mirai)", "value": "6f3c86e051f5cbe230b65613d90885eb", "object_relation": "md5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026295, "uuid": "11cc162f-1ff8-4108-bed8-55713125f24b", "comment": "Malware payload (Mirai)", "value": "7ca108c9ae91833c1bb9da9b6222d13dfe51760760dc545cb7d5dbd3a2028836", "object_relation": "sha256", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026295, "uuid": "65ef0875-de99-4aaf-b739-a68bb0aae822", "value": "T19D41EDF7FDB441393045C1B8E5EB4679D787082B04482C29789EA8386B7D418E22DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026295, "uuid": "e2bd2301-f998-4959-a5d0-4c2b33cf8f72", "value": "48:KipHa61taRpxYmXRHSvvJtlslVt1/he1O1ho:TprJ037pho", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026295, "uuid": "227da5d8-b175-4ba0-acd3-c75677a27277", "value": 2104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026295, "uuid": "c894ab0f-96f3-4500-9129-81606114293e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0c61779-358d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776026685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026685, "uuid": "dae33c03-7fe5-40ad-8b32-730cde250676", "comment": "Malware payload", "value": "5294f25631d20b68ebf3a9acd4cc1f5d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026685, "uuid": "1e85082f-b7eb-4fb4-ab3e-33dc5ffbed87", "comment": "Malware payload", "value": "a505de0af54408dcde2f869608398a409908543a43fad15397a342b2200f8a52", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026685, "uuid": "d177bf19-d67e-44a9-b4fb-5191ff89a4b8", "value": "T19E06331581EA41EC80D88DFC9D152EF38F55EDF028FB0484A9F7E69208F79D297929", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026685, "uuid": "bbf569de-ce57-4130-9045-a3d419a1e01e", "value": "98304:zenAd0WS0Zelbevq7hwc8UthyhjeomOwsb3Pu:zenAd0W5ZwUJxhBwMu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776026685, "uuid": "9688daad-533f-47b8-9143-cb0e52a7b70c", "value": 3716336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026685, "uuid": "29413396-9749-4131-99ac-62add7285d35", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42c1257b-36b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776028326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776028326, "uuid": "d1f5c1b6-163b-427b-9023-18c10d1f5c3a", "comment": "Malware payload", "value": "02c7bcad98efe0d621e931fdd1075083", "object_relation": "md5", "Tag": [ { "name": "Cryxos", "colour": "#f8446f", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776028326, "uuid": "e2f8031e-4ea8-4e56-aa6f-005583078643", "comment": "Malware payload", "value": "0cc4c4f146b0e57552654500631565698177bff59f3a3d03ed4af708cea6b113", "object_relation": "sha256", "Tag": [ { "name": "Cryxos", "colour": "#f8446f", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776028326, "uuid": "8fc3014e-5512-41b5-af8c-f19244e40c20", "value": "T1E8D0C2DE6CE6217002F3905A8B5F3A002037008B2649E104BB6089603F2460F43A66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776028326, "uuid": "42bbd09b-c64c-4421-8617-2be0aed1b985", "value": "6:2LGXHTG6czCRoawSMV4AEo2THIr8669k+mVOoXtSFf7:2QHTGpSo6a4AOHed6C+yOoXtSFT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776028326, "uuid": "9f625322-6b17-4f4c-aa9a-83af64fde6bf", "value": 276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776028326, "uuid": "cd56c624-bc83-4d10-8a23-406c43c352a2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36ac06cc-36bc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776031742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776031742, "uuid": "ea25d323-18cb-496a-b403-6893b2dffa81", "comment": "Malware payload (Mirai)", "value": "381ea4f39de8a3361e18e14e38d64057", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776031742, "uuid": "b05bc9fb-f0bd-4d09-897b-8705c1e1cede", "comment": "Malware payload (Mirai)", "value": "1d977d7afd661f4d0ffa11ad557345d4ac519a36f6aedeffa655bb7ae563def0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776031742, "uuid": "bb5bb6ff-6aca-4b31-aaf0-c5aebec2b4da", "value": "T11FB57C47B708B9BEF646733784574A0E24047F12C0815F33A2B5F4AD5E7A1A91F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776031742, "uuid": "b0421ff8-49ef-4935-90dc-0159140bd8c0", "value": "49152:KbN2VjssXZjBfBXa1MyjH0hEqPvZbhrBksC:KbN2ZF+MgYPvbBkl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776031742, "uuid": "5875b717-1df2-44c5-aeb0-206b02fc7b46", "value": 2322236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776031742, "uuid": "54c8ea2c-99e3-4d7a-a4b7-b9d5b7ac0ac0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b846d4a-36bf-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776032958, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776032958, "uuid": "70d03e8b-e83b-4769-a6f9-ce7194f9e8ba", "comment": "Malware payload (Mirai)", "value": "3c7f7dd2f71a0d1122ce4666b7ae8e87", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776032958, "uuid": "8f3124da-ccc4-48e5-839a-0b67a1185ca5", "comment": "Malware payload (Mirai)", "value": "ccf7a7b86d34aff9ec8b4655180d85a62c03d3db7979a00f2380255c7460446e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776032958, "uuid": "cfead203-11e2-4192-b3aa-f6e4d8798298", "value": "T12FB55B41FD51AA56C6E0A6BAFB7EC28C33272BB9C3EE30174D044734779A95A0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776032958, "uuid": "6a1ccaeb-c730-464e-bbd9-d07d8f4673eb", "value": "24576:beKzkV3OafbRGijqGKlX4KlgP6S9+rZ5K03DMnw7Dqd3vxJGtfWRXnMKmaxWKous:be5G1lIKiPYG03yZxstuozupWvPle4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776032958, "uuid": "e4b4b8bb-9568-4c2a-aeac-31dfcc86cb16", "value": 2494268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776032958, "uuid": "b013cdde-4d28-4c90-991f-d646694a271b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb34c568-35b3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776033249, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776033249, "uuid": "bdf05cb2-9244-41ad-8979-0f73b236457f", "comment": "Malware payload", "value": "0346de5c7584e63a65c7e3e591de4d62", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776033249, "uuid": "77a6c5e9-4fd4-4654-a9c6-b9dfb2ee2d9e", "comment": "Malware payload", "value": "b177e05670a027fdef9e81047cba02828b8993e990d31af219598487d6455460", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776033249, "uuid": "8048aea5-8251-4e6f-8493-e00f071df901", "value": "T199E633742902D4F76C2EB0621F444D54BE48CA32DAEF4E6C0F75F96FB116384A0A5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776033249, "uuid": "5655c03b-887e-4ec1-b4b2-abfe27f40cb7", "value": "196608:AzAF6y+CxHzBzlhx4sKwvkxS8QV5D7h1rLjl34KOPcF+Eul9+eHMrCMyCo5+efN7:nFNxHzjBKwv98CDFBZ4QHrCfhXbDP3vF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776033249, "uuid": "b37bb8e0-10e1-4b72-9076-9fc1faecc4ee", "value": 15224191, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776033249, "uuid": "47673ad4-4257-43c4-a842-3a86fbc4cd54", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e90588fe-36c2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776034618, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776034618, "uuid": "c65a3544-142e-4d97-acc6-fe58179db84b", "comment": "Malware payload (Mirai)", "value": "2561e12c17a148ccb0e586a8265a37c6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776034618, "uuid": "5f1349ce-a367-49a7-8415-fdbaf8a53d3d", "comment": "Malware payload (Mirai)", "value": "d125d2588b3037975c1a339f1576ac2285d28ef888c61e3d01f9d15205696c27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776034618, "uuid": "c090fdd5-38b4-46da-a5ed-db9dccdbdaa4", "value": "T163C59D62D968AFEFC526D571A538CEF20B53680052160FF639A6E3B44947AC2F3067", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776034618, "uuid": "56009550-afa6-4493-b79f-696002e659f3", "value": "49152:slsCl+cV/TeYJd3ml7wn6/JxMKvDbZg3uF+aGcXuv+VpmvPseWI:LC6/HFXBpmseW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776034618, "uuid": "7762024d-27e9-4b1d-92c2-f86dde021fe0", "value": 2694952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776034618, "uuid": "904e6820-1c7d-407f-bf9b-9aefeee0534f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775952008, "uuid": "91976980-3602-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.66.250:45019/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775952070, "uuid": "b68cb234-3602-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mac6-bind.krinoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775952254, "uuid": "23fcf644-3603-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://peer1-link.zeq9lora.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775952367, "uuid": "6740751d-3603-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://f13hwmuq.amb1ing-farm.digital/?=check&&actmn=igmcfYhhKNGPWHKN", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775952849, "uuid": "86889dd3-3604-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://seed2-node.zeq9lora.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775953027, "uuid": "f0df4c49-3604-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hash3-list.zeq9lora.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775953268, "uuid": "80c745a1-3605-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://salt4-byte.zeq9lora.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775953866, "uuid": "e4f1f03a-3606-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ping5-test.zeq9lora.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775954047, "uuid": "5113ede8-3607-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hop6-route.zeq9lora.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775954289, "uuid": "e117845c-3607-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zone1-dns.travexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775954586, "uuid": "92356dc1-3608-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rec2-record.travexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775954892, "uuid": "4855d1ce-3609-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.164.154:60858/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775954897, "uuid": "4b7eab13-3609-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.194.74:45878/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775954950, "uuid": "6b1e1a5a-3609-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ttl3-limit.travexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775955014, "uuid": "914b1103-3609-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.28.179.42:34243/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775955308, "uuid": "40b5f064-360a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soa4-start.travexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775955493, "uuid": "aebfed66-360a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.253.39:56295/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775955670, "uuid": "1838bedd-360b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ptr5-rev.travexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775955969, "uuid": "ca359675-360b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://txt6-info.travexon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775956215, "uuid": "5cf14c91-360c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.231:47299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775956268, "uuid": "7c8a2e63-360c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw1-blob.bryo2maxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775956276, "uuid": "815b8b91-360c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.55.224:57343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775956628, "uuid": "53177cba-360d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://file2-obj.bryo2maxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775956814, "uuid": "c26fbba0-360d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.164.154:60858/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775956930, "uuid": "0704048d-360e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dir3-index.bryo2maxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775957116, "uuid": "76220534-360e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.253.39:56295/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775957286, "uuid": "dbb6f617-360e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tmp4-path.bryo2maxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775957428, "uuid": "2fe0a05b-360f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.213.15:39786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775957648, "uuid": "b33bf324-360f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bin5-exec.bryo2maxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775957832, "uuid": "2109c8e8-3610-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.133.107:42420/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775957946, "uuid": "64d839f2-3610-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.13.3:55202/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775958008, "uuid": "8a098d70-3610-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lib6-share.bryo2maxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775958098, "uuid": "bf3100fb-3610-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.63.76:36399/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775958195, "uuid": "f9909168-3610-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.80.19:45986/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775958312, "uuid": "3eed85e2-3611-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dom1-tree.norxelium.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775958435, "uuid": "882b74f5-3611-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.101.229:44224/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775958667, "uuid": "12cba774-3612-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://css2-rule.norxelium.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775959027, "uuid": "e90f0db3-3612-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tag3-attr.norxelium.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775959271, "uuid": "7ab5d7f0-3613-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://js4-script.norxelium.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775959327, "uuid": "9c1df746-3613-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.133.107:42420/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775959627, "uuid": "4e9bccb7-3614-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.113.60:50615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775959628, "uuid": "4f55a4ee-3614-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://img5-asset.norxelium.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775959813, "uuid": "bdfd76ff-3614-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.13.3:55202/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775959871, "uuid": "e08d7422-3614-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.63.76:36399/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775959987, "uuid": "253f94a6-3615-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://font6-face.norxelium.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775960053, "uuid": "4cf83d00-3615-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.80.19:45986/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775960128, "uuid": "79ac814c-3615-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.189.182:56559/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775960348, "uuid": "fc61b1cb-3615-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cron1-task.qul7vexar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775960651, "uuid": "b11e23a1-3616-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://job2-run.qul7vexar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775960946, "uuid": "6113487f-3617-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pid3-check.qul7vexar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775961074, "uuid": "ad0c20b9-3617-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.113.60:50615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775961308, "uuid": "39066c00-3618-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://top4-load.qul7vexar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775961435, "uuid": "847894f3-3618-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.203.190:43506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775961613, "uuid": "eec4f856-3618-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.186.137:60035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775961726, "uuid": "31c03e6b-3619-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stat5-info.qul7vexar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775961976, "uuid": "c6c70e89-3619-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.28.179.42:34243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775962271, "uuid": "76ad6623-361a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bash6-cmd.qul7vexar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775962447, "uuid": "dfb88e88-361a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flow1-point.zorvelixan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775962516, "uuid": "08ea8875-361b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.29.205:41439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775962572, "uuid": "2a55a93c-361b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.36.133.117:43987/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775962694, "uuid": "72d865fc-361b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.203.190:43506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775962752, "uuid": "959acf63-361b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api2-delta.zorvelixan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775963048, "uuid": "463129db-361c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-alpha.zorvelixan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775963293, "uuid": "d7ac50ed-361c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.186.137:60035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775963350, "uuid": "f9e4973c-361c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sync4-meta.zorvelixan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775963527, "uuid": "639d4c6e-361d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.150.65:49597/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775963708, "uuid": "cf4e801e-361d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://web5-relay.zorvelixan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775963777, "uuid": "f861f01c-361d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.36.133.117:43987/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775963949, "uuid": "5ea838d8-361e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.48.227:44027/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775964072, "uuid": "a879069b-361e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-post.zorvelixan.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775964126, "uuid": "c8ac1b37-361e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.150.65:49597/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775964367, "uuid": "584edf85-361f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://site1-proxy.plu8moran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775964425, "uuid": "7aa10747-361f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7862638382/4ZdyEdX.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775964635, "uuid": "f8154758-361f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.140.131:35523/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775964727, "uuid": "2eacf847-3620-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data2-fast.plu8moran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775964786, "uuid": "51e31c74-3620-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.9.139.117:56264/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775965027, "uuid": "e1604cef-3620-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://app3-frame.plu8moran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775965396, "uuid": "bdb6ef32-3621-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.252.16:47389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775965449, "uuid": "dce7cc47-3621-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft4-base.plu8moran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775965747, "uuid": "8ee28651-3622-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub5-local.plu8moran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775965931, "uuid": "fc93bcfa-3622-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.204.231:36096/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775966047, "uuid": "4178311a-3623-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://port6-send.plu8moran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775966115, "uuid": "69f505e7-3623-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.118.193:33166/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775966115, "uuid": "69f533e8-3623-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.48.227:44027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775966348, "uuid": "f4bd7d7b-3623-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://link1-host.draxolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775966355, "uuid": "f8fab46c-3623-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.105:53345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775966531, "uuid": "620427c2-3624-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.252.245:54450/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775966596, "uuid": "88999dd4-3624-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.252.245:54450/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775966716, "uuid": "cfed4fac-3624-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://peer2-join.draxolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775966834, "uuid": "1643e7b2-3625-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.252.16:47389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775967134, "uuid": "c976abce-3625-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://srv3-ready.draxolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775967435, "uuid": "7cc9523c-3626-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main4-path.draxolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775967849, "uuid": "738ffa31-3627-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.118.193:33166/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775967853, "uuid": "75cd4f9d-3627-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://unit5-mesh.draxolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775968035, "uuid": "e25a80a7-3627-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.195.7.105:53345/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775968391, "uuid": "b6743e64-3628-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-root.draxolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775968568, "uuid": "1fe4f003-3629-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://work1-area.veq4tralis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775968754, "uuid": "8eb22204-3629-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api2-stage.veq4tralis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775968817, "uuid": "b44f9517-3629-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.204.231:36096/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775969047, "uuid": "3dd51ba7-362a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-view.veq4tralis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775969413, "uuid": "1803fee7-362b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://call4-back.veq4tralis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775969710, "uuid": "c8ad09be-362b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-task.veq4tralis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775970070, "uuid": "9f45138c-362c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://way6-gate.veq4tralis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775970077, "uuid": "a33fc51b-362c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.132.251:52976/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775970143, "uuid": "cb100e62-362c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.166.255:59261/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775970258, "uuid": "0f6ed8ee-362d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.63.39:41825/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775970433, "uuid": "77b19682-362d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://step1-item.krynexor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775970496, "uuid": "9d453fd0-362d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.24.188.113:54382/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775970559, "uuid": "c29d653a-362d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.121.175:33960/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775970617, "uuid": "e555d267-362d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.38.134.233:57439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775970791, "uuid": "4d504113-362e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://list2-load.krynexor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775971027, "uuid": "d9ead852-362e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.186:37845/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775971089, "uuid": "fefd953e-362e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-core.krynexor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775971450, "uuid": "d5e00c29-362f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api4-sync.krynexor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775971457, "uuid": "d9ef95cf-362f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.56.206:58800/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775971515, "uuid": "fca3f4af-362f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.132.251:52976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775971815, "uuid": "af5eb42e-3630-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-rule.krynexor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775972111, "uuid": "5fc94392-3631-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub6-main.krynexor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775972114, "uuid": "61ed0217-3631-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.121.175:33960/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775972234, "uuid": "a908aa8e-3631-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.115.102.246:41079/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775972295, "uuid": "cd7e0bdc-3631-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.211.117.55:60426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775972466, "uuid": "33bd8dc9-3632-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://auth1-user.sox9liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775972827, "uuid": "0a66f19f-3633-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.186:37845/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775972833, "uuid": "0e674c2f-3633-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api2-cert.sox9liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775973133, "uuid": "c12e068e-3633-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-pack.sox9liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775973487, "uuid": "93d13af2-3634-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blob4-data.sox9liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775973487, "uuid": "943d238f-3634-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.190.106:46174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775973671, "uuid": "0191b77c-3635-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.157.0:44711/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775973727, "uuid": "2311f6c2-3635-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.157.222:49384/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775973789, "uuid": "47f1beff-3635-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-edge.sox9liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775974049, "uuid": "e34de3a6-3635-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.240.165.44:50520/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775974148, "uuid": "1e122830-3636-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-link.sox9liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775974272, "uuid": "68015c21-3636-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.46.55:51278/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775974448, "uuid": "d100dcac-3636-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://file1-swap.travemox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775974574, "uuid": "1bbf9d81-3637-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.31.132:59509/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775974627, "uuid": "3b9433b3-3637-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.255.251.91:40631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775974746, "uuid": "827a8596-3637-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api2-port.travemox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775974994, "uuid": "16847df1-3638-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.233.58:39587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775975168, "uuid": "7df4a769-3638-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-link.travemox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775975355, "uuid": "edbe151a-3638-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.157.0:44711/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775975422, "uuid": "15860576-3639-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.227.10.192:53406/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775975471, "uuid": "32966fa6-3639-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://db4-cache.travemox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775975712, "uuid": "c21facd0-3639-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.255.251.91:40631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775975775, "uuid": "e793449c-3639-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.240.165.44:50520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775975830, "uuid": "08c42726-363a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.190.106:46174/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775975832, "uuid": "098a0644-363a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-scan.travemox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775975948, "uuid": "4f0bb476-363a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.102.70:43603/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775976078, "uuid": "9c3e00d6-363a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.46.55:51278/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775976186, "uuid": "dcdd0fbb-363a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub6-pipe.travemox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775976314, "uuid": "29068b7d-363b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.230.188:38991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775976487, "uuid": "903a812f-363b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base1-site.bri2xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775976847, "uuid": "66fa8e56-363c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://app2-root.bri2xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775976978, "uuid": "b511c761-363c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.227.10.192:53406/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977146, "uuid": "193c02f6-363d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-flag.bri2xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977326, "uuid": "8486504a-363d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.118.220:54296/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977339, "uuid": "8bd4555f-363d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.229.251:51959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977385, "uuid": "a74a85c6-363d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.66.228.93/linux_arm", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "stopmalwareservice", "colour": "#bce6dc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977387, "uuid": "a8a2776e-363d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.66.228.93/linux_arm5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "stopmalwareservice", "colour": "#bce6dc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977387, "uuid": "a8b76c60-363d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.66.228.93/linux_amd64", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "stopmalwareservice", "colour": "#bce6dc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977389, "uuid": "a9915681-363d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.66.228.93/linux_mips", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "stopmalwareservice", "colour": "#bce6dc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977400, "uuid": "b05b50e4-363d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.59.231.32/Hammz.sh", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977508, "uuid": "f0fe5af5-363d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://box4-file.bri2xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977516, "uuid": "f5b865eb-363d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.9.27:53452/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977577, "uuid": "19e416a3-363e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.9.27:53452/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977765, "uuid": "89be1f6e-363e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.7.248:46851/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977821, "uuid": "ab0f043e-363e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.251.140:35341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775977867, "uuid": "c6afe537-363e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-info.bri2xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775978121, "uuid": "5e1a3d98-363f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.93.84:38207/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775978169, "uuid": "7a758d58-363f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-map.bri2xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775978295, "uuid": "c5a43378-363f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.15.61:43770/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775978531, "uuid": "527bfab3-3640-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://read1-data.norqelix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775978898, "uuid": "2d0ed07a-3641-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.136.91:55785/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775978963, "uuid": "53e78b91-3641-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.217.123.237:52109/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775979066, "uuid": "91a45f20-3641-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api2-jump.norqelix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775979139, "uuid": "bcd43fd7-3641-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.204.103:34110/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775979309, "uuid": "2259fa30-3642-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-push.norqelix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775979552, "uuid": "b2ec31ca-3642-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://map4-base.norqelix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775979731, "uuid": "1dfd5c7f-3643-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.156.42:33143/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775979861, "uuid": "6b8705a3-3643-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-flow.norqelix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775979869, "uuid": "70176357-3643-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/set/?KIDDIONSMODMENU7", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775979912, "uuid": "89ac6c29-3643-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/set/?KIDDIONSMODMENU6", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775979973, "uuid": "adfc746e-3643-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/set/?KIDDIONSMODMENU3", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775980045, "uuid": "d9285c76-3643-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/set/?KIDDIONSMODMENU5", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775980057, "uuid": "e039c008-3643-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/set/?KIDDIONSMODMENU1", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775980058, "uuid": "e08ef679-3643-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/set/?KIDDIONSMODMENU8", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775980061, "uuid": "e295375a-3643-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/set/?KIDDIONSMODMENU9", "Tag": [ { "name": "pw-4DKCUJ4DDXS", "colour": "#a39222", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775980089, "uuid": "f31e8119-3643-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.136.91:55785/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775980089, "uuid": "f32459f9-3643-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.155.41:48303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775980327, "uuid": "80c951a6-3644-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.4.198:34019/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775980454, "uuid": "ccf5c779-3644-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub6-area.norqelix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775980515, "uuid": "f1012fda-3644-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.217.123.237:52109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775980629, "uuid": "3548381e-3645-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://test1-run.quv7maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775980868, "uuid": "c3ae11d9-3645-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api2-call.quv7maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775981167, "uuid": "75a08b76-3646-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-soft.quv7maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775981240, "uuid": "a0f53a07-3646-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.43.177:52857/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775981353, "uuid": "e467e635-3646-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/evanblue/thestar/-/raw/main/4J8576A0E8V3.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775981471, "uuid": "2b277cbf-3647-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/evanblue/thestar/-/raw/main/259UZDS8POXH.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775981528, "uuid": "4d01e74d-3647-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault4-key.quv7maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775981890, "uuid": "24a64d34-3648-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-relay.quv7maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775981890, "uuid": "24a76089-3648-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/atteriss/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775981890, "uuid": "24bfd480-3648-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/atteriss/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775982188, "uuid": "d6300250-3648-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-main.quv7maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775982251, "uuid": "fb831957-3648-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://goragalo.live/usu", "Tag": [ { "name": "pw-update", "colour": "#10debc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775982257, "uuid": "ff659dbf-3648-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/aquaelia9084/new-year/releases/download/new/v2.4.zip", "Tag": [ { "name": "pw-update", "colour": "#10debc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775982486, "uuid": "880e4e4f-3649-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.101/main.go", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775983032, "uuid": "cd959c59-364a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/trustnobodys/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775983036, "uuid": "cfb0af8b-364a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/jahredip/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775983036, "uuid": "cff1728b-364a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/trustnobodys/FiveM-Spoofer/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775983037, "uuid": "d0037edc-364a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/jahredip/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775983093, "uuid": "f1757b9e-364a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ma1n.quv7maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775983150, "uuid": "137465b4-364b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.17.159.203:35723/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775983278, "uuid": "5fb2ba04-364b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.43.177:52857/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775983340, "uuid": "84c55c3f-364b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.193.170:40844/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775983868, "uuid": "bf89dc48-364c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://a1ea.norqelix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775984058, "uuid": "30c993a2-364d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.54.172:32873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775984111, "uuid": "50581307-364d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://b0x.bri2xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775984587, "uuid": "6bf4e5a2-364e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fi1e.bri2xalon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775984598, "uuid": "72b61c16-364e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.17.159.203:35723/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775984658, "uuid": "966512e3-364e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.31.82:45032/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775985315, "uuid": "1dda1a2c-3650-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3.travemox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775985315, "uuid": "1dfe0ad7-3650-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.165.211:50242/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775985391, "uuid": "4b1b4f19-3650-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.54.172:32873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775985490, "uuid": "8624fabf-3650-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://f0rmate.para5itrecal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775985739, "uuid": "1a7f933b-3651-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.81.141:35825/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775985788, "uuid": "37d075ce-3651-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/mixteens/FiveM-Spoofer/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775985796, "uuid": "3c79cfc5-3651-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/mixteens/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775985850, "uuid": "5d1e82e9-3651-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://1ink.sox9liven.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775986215, "uuid": "36c6ca1b-3652-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://serlith5ex.xeltronix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775986217, "uuid": "37f845c1-3652-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.31.82:45032/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775986273, "uuid": "58d9e27c-3652-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.152.45:44677/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775986458, "uuid": "c787c7a7-3652-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.63.39:41825/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775986512, "uuid": "e7c07eb0-3652-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.192.27.231:8080/robot.html", "Tag": [ { "name": "85-192-27-231-8080", "colour": "#c535cd", "exportable": true, "hide_tag": false }, { "name": "Ligolo", "colour": "#BDEABC", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775986633, "uuid": "2f7f555c-3653-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ktvkmgqc.xeltronix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775986762, "uuid": "7c9bc4d2-3653-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.161.209:53130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775986993, "uuid": "064633e2-3654-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://toke-plate.xeltronix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775987058, "uuid": "2d00bb7d-3654-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.161.250:55762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775987409, "uuid": "fe391f08-3654-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://77vlmbv.xeltronix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775987422, "uuid": "05b771ac-3655-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.66.228.93/linux_arm64", "Tag": [ { "name": "45-66-228-93", "colour": "#3610ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775987422, "uuid": "05e7dfc7-3655-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.66.228.93/linux_mips64", "Tag": [ { "name": "45-66-228-93", "colour": "#3610ab", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775987829, "uuid": "f8ac2f12-3655-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://enclin.xeltronix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775987898, "uuid": "21e19989-3656-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.152.45:44677/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775987899, "uuid": "220ad360-3656-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.120.141:36611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988022, "uuid": "6bdd2ea6-3656-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.125.145/ghost.sh", "Tag": [ { "name": "77-110-125-145", "colour": "#9b583d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988023, "uuid": "6bf0c74f-3656-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.125.145/q12.txt", "Tag": [ { "name": "77-110-125-145", "colour": "#9b583d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988072, "uuid": "8979491a-3656-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.125.145/q11.txt", "Tag": [ { "name": "77-110-125-145", "colour": "#9b583d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988197, "uuid": "d396ca0b-3656-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nf59jdtk.xeltronix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988264, "uuid": "fbe1d150-3656-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.103.213:47064/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988384, "uuid": "43633e8b-3657-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.161.209:53130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988617, "uuid": "ce173d3f-3657-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.55.224:57343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988621, "uuid": "d0b451e3-3657-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zendra6a.pra7vexal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988753, "uuid": "1f03efd7-3658-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.42.50:42761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988915, "uuid": "8014be87-3658-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/abdalrhmanasif5/32/refs/heads/main/app/(public)/contact/Software_v1.6-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988916, "uuid": "8025a7fb-3658-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/abdalrhmanasif5/32/raw/refs/heads/main/app/(public)/contact/Software_v1.6-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988916, "uuid": "80280ed1-3658-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/abdalrhmanasif5/abdalrhmanasif5.github.io/refs/heads/main/torques/github_io_abdalrhmanasif_screwsman.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988916, "uuid": "802e750c-3658-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/abdalrhmanasif5/abdalrhmanasif5.github.io/raw/refs/heads/main/torques/github_io_abdalrhmanasif_screwsman.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988916, "uuid": "804f7553-3658-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/abdalrhmanasif5/Tic_tac_toe/raw/refs/heads/main/auriculae/toe-Tic-tac-v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988917, "uuid": "80cb416d-3658-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/abdalrhmanasif5/Tic_tac_toe/refs/heads/main/auriculae/toe-Tic-tac-v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988925, "uuid": "85d3d189-3658-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.32.202:60833/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988969, "uuid": "a00762b6-3658-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.120.141:36611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775988972, "uuid": "a1d7824c-3658-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://f1x8-point.pra7vexal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775989102, "uuid": "ef844e53-3658-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.45.26:35402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775989456, "uuid": "c24c144c-3659-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kel-valear.pra7vexal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775989464, "uuid": "c727903b-3659-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.103.213:47064/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775989493, "uuid": "d8472f19-3659-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.107.147:43327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775989585, "uuid": "0f526779-365a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.141.169:39308/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775989754, "uuid": "73a1e186-365a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://timbecor.pra7vexal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990234, "uuid": "9200bf49-365b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://anccompi.pra7vexal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990303, "uuid": "bb26798b-365b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.196.191:48777/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990367, "uuid": "e10e42b7-365b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.32.202:60833/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990542, "uuid": "49d25100-365c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.247.162:55074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990656, "uuid": "8d6a0870-365c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sub-runvv.pra7vexal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990717, "uuid": "b1f2f69d-365c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.45.26:35402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990718, "uuid": "b27ff695-365c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.231.76:40893/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990905, "uuid": "21bbd80d-365d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.107.147:43327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990905, "uuid": "22015625-365d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.66.246:52417/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775990955, "uuid": "3fe513ae-365d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jymbrdt.drumoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775991436, "uuid": "5e6b2d8f-365e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dyndra8al.drumoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775991728, "uuid": "0caa0e65-365f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.33.117:53163/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775991847, "uuid": "536c9709-365f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.233.89.32/cgi-bin.exe", "Tag": [ { "name": "193-233-89-32", "colour": "#6d4545", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775991848, "uuid": "5436cb74-365f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.196.191:48777/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775991851, "uuid": "55e2cf95-365f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dawnbold.drumoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775992092, "uuid": "e577b15f-365f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://pl.avgkrbw.com/cgi-bin.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "pl-avgkrbw-com", "colour": "#5b2d3f", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775992146, "uuid": "056df627-3660-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.233.89.32/cgi-bin.exe", "Tag": [ { "name": "193-233-89-32", "colour": "#6d4545", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775992213, "uuid": "2da7fe11-3660-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scalelabel.drumoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775992341, "uuid": "7a1e2a01-3660-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.133.158:37406/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775992404, "uuid": "9fa1f61c-3660-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.160.33:35575/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775992633, "uuid": "27dc2ab7-3661-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-cornp.drumoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775992705, "uuid": "52b5b9e5-3661-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.231.76:40893/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775992988, "uuid": "fb86a50a-3661-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://outletarray.drumoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775993362, "uuid": "da94e79b-3662-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.146.103:54816/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775993417, "uuid": "fb121c9e-3662-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://glypipeli.vo3xiran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775993540, "uuid": "444531d3-3663-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.111.204.158:47130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775993647, "uuid": "841db4dc-3663-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.36.188.81/150.js", "Tag": [ { "name": "154-36-188-81", "colour": "#d9cc8f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775993647, "uuid": "84624571-3663-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.36.188.81/ware.js", "Tag": [ { "name": "154-36-188-81", "colour": "#d9cc8f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775993648, "uuid": "8507a76f-3663-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.36.188.81/openclaw%20installation.exe", "Tag": [ { "name": "154-36-188-81", "colour": "#d9cc8f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775993774, "uuid": "d032a1a9-3663-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cmomy7g.vo3xiran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775993786, "uuid": "d6ed9d20-3663-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.228.61.65:44334/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775993965, "uuid": "41961ad1-3664-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.133.69:45126/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994137, "uuid": "a8a97bfc-3664-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mogen.vo3xiran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994249, "uuid": "eb69a3ee-3664-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://app.cc-coins.xyz/epdevmgr.dll", "Tag": [ { "name": "app-cc-coins-xyz", "colour": "#c2bc69", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994309, "uuid": "0f1f5770-3665-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/xFoXuSx/xfoxusx.github.io/refs/heads/main/arsenism/github_io_xfoxusx_v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994312, "uuid": "109f7e00-3665-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/xFoXuSx/Arduino-joystick-and-servo-control/refs/heads/main/lection/servo-Arduino-control-and-joystick-1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994314, "uuid": "11dcb290-3665-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/xFoXuSx/xfoxusx.github.io/raw/refs/heads/main/arsenism/github_io_xfoxusx_v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994314, "uuid": "12230bbf-3665-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/xFoXuSx/Arduino-joystick-and-servo-control/raw/refs/heads/main/lection/servo-Arduino-control-and-joystick-1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994378, "uuid": "37e3ea96-3665-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.247.47:59739/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994550, "uuid": "9eb89d02-3665-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neura-vector.vo3xiran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994667, "uuid": "e402bb13-3665-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/BeAsT700/ServerMaker/refs/heads/main/data/Maker_Server_v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994669, "uuid": "e56f7a31-3665-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/BeAsT700/flexlkgaming-com/raw/refs/heads/main/firmhearted/com_flexlkgaming_1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994669, "uuid": "e593ff88-3665-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/BeAsT700/beast700.github.io/raw/refs/heads/main/still/beast_io_github_2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994670, "uuid": "e651232b-3665-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/BeAsT700/flexlkgaming-com/refs/heads/main/firmhearted/com_flexlkgaming_1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994672, "uuid": "e774bde4-3665-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/BeAsT700/beast700.github.io/refs/heads/main/still/beast_io_github_2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994673, "uuid": "e7d7ce6f-3665-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/BeAsT700/ServerMaker/raw/refs/heads/main/data/Maker_Server_v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994859, "uuid": "568413b3-3666-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.111.204.158:47130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994919, "uuid": "7abf19eb-3666-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.11.208:32961/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775994970, "uuid": "992d767a-3666-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pulse1-phase.vo3xiran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775995033, "uuid": "be6727bf-3666-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.146.103:54816/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775995219, "uuid": "2d5a4939-3667-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.66.246:52417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775995394, "uuid": "95da8e81-3667-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dosb0zd.vo3xiran.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775995517, "uuid": "deced678-3667-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.133.158:37406/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775995627, "uuid": "20a78703-3668-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.247.47:59739/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775995813, "uuid": "8fa74141-3668-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rn1no-hold.klinavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775995927, "uuid": "d31bf48b-3668-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.82.181:59400/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775995936, "uuid": "d86ce431-3668-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.62.169:50063/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775996111, "uuid": "4130214f-3669-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynspireis.klinavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775996357, "uuid": "d3604be3-3669-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.11.208:32961/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775996526, "uuid": "380f77eb-366a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.62.169:50063/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775996532, "uuid": "3c16a762-366a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5xhr.klinavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775996779, "uuid": "cef14a47-366a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.58.239:39369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775996828, "uuid": "ec5d8b3f-366a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.82.181:59400/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775996844, "uuid": "f5b33b9d-366a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.225.181:46083/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775996955, "uuid": "383b8552-366b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mhkugefu.klinavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997017, "uuid": "5cbfb1cc-366b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:51959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997017, "uuid": "5d2665af-366b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.234.150:56706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997079, "uuid": "81e2b06f-366b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.130.49:51449/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997126, "uuid": "9dee4da9-366b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/talktobaby/talktobaby.github.io/refs/heads/main/hymeneals/talktobaby-io-github-v1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997128, "uuid": "9f22abf9-366b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/talktobaby/talktobaby.github.io/raw/refs/heads/main/hymeneals/talktobaby-io-github-v1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997128, "uuid": "9f24ef38-366b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/talktobaby/infinity-snip3/refs/heads/master/audio/infinity_snip_screeve.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997131, "uuid": "a0cbbebb-366b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/talktobaby/infinity-snip3/raw/refs/heads/master/audio/infinity_snip_screeve.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997135, "uuid": "a32d03a1-366b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.26.86.218:47719/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997245, "uuid": "e4a33ef7-366b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://178.16.54.149/sostener.vbs", "Tag": [ { "name": "178-16-54-149", "colour": "#845029", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997245, "uuid": "e4c337cd-366b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://178.16.54.149/andre.vbs", "Tag": [ { "name": "178-16-54-149", "colour": "#845029", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997309, "uuid": "0ae5b492-366c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sparrowultra.klinavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997367, "uuid": "2d76ee65-366c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Ewoba/kick-tg-rewards/refs/heads/main/backend-python/rem/Lib/site-packages/pip/_vendor/packaging/tg-kick-rewards-v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997367, "uuid": "2d848a5a-366c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Pato851/rock-breaker/refs/heads/main/src/components/rock_breaker_v1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997367, "uuid": "2da98072-366c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Pato851/rock-breaker/raw/refs/heads/main/src/components/rock_breaker_v1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997367, "uuid": "2dd90bd4-366c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Pato851/pato851.github.io/refs/heads/main/supraterraneous/io-github-pato-2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997369, "uuid": "2e9bdd85-366c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Pato851/pato851.github.io/raw/refs/heads/main/supraterraneous/io-github-pato-2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997369, "uuid": "2ea86ca0-366c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Ewoba/ewoba.github.io/raw/refs/heads/main/lampoon/io_github_ewoba_v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997372, "uuid": "30be8cc4-366c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Ewoba/kick-tg-rewards/raw/refs/heads/main/backend-python/rem/Lib/site-packages/pip/_vendor/packaging/tg-kick-rewards-v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997376, "uuid": "332ca15b-366c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Ewoba/ewoba.github.io/refs/heads/main/lampoon/io_github_ewoba_v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997496, "uuid": "7abe3756-366c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.8.16:58154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997680, "uuid": "e85ae1ce-366c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.15.16:37694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997785, "uuid": "26ccb642-366d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://178.16.55.80/System.vbs", "Tag": [ { "name": "178-16-55-80", "colour": "#b2a786", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997789, "uuid": "28dd5ccc-366d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://summ4-field.klinavor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997846, "uuid": "4b5aa727-366d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.55.80/System.vbs", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775997909, "uuid": "70bd474d-366d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.225.181:46083/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998208, "uuid": "22d3cceb-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sapcha.zeq8morin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998449, "uuid": "b27df14a-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/init.sh", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "b3f71548-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/bins/redis-scoutd", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "b3f717dc-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/redis-proxyd", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "b3f726fd-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/bins/redis-conteinerd", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "b3f83090-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/bins/redis-conteinerd-shim", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "b3f8dcea-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/redis-credentiald", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "b3f8e56d-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/redis-scoutd", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "b3f90262-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/bins/redis-swarmd", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "b3fd29a4-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/bins/redis-credentiald", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "b4005cb8-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/bins/armada", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "b400b21c-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/redis-initd", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "b400fc8f-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/redis-scand", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "b403227c-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.4.9:47466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "b40346e8-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/bins/redis-initd", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998451, "uuid": "b4064f4d-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/armada", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "b40ede0f-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/bins/redis-scand", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "b40f9353-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/redis-runcd", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "b40f94af-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/bins/redis-sbomd", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "b40faab6-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/bins/redis-runcd", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "b40fac0e-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/redis-buildxd", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "b410607f-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/redis-daemon", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "b4134c80-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/bins/redis-daemon", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "b415ec73-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/redis-conteinerd-shim", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "b4178c56-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/redis-swarmd", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "b417a951-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/bins/redis-composd", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "b417cb00-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/redis-sbomd", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "b417d155-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/redis-conteinerd", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "b41ab9e0-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/redis-composd", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998452, "uuid": "b422429e-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/bins/redis-buildxd", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998507, "uuid": "d514739e-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.16/bins/redis-proxyd", "Tag": [ { "name": "130-12-180-16", "colour": "#625403", "exportable": true, "hide_tag": false }, { "name": "armada", "colour": "#8a17af", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998516, "uuid": "da9578c9-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deepoutl.zeq8morin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998577, "uuid": "fed62798-366e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.234.150:56706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998812, "uuid": "8af4d490-366f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.148.198.166:51569/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998931, "uuid": "d1e48493-366f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.26.86.218:47719/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775998932, "uuid": "d242e865-366f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://irfy5j.zeq8morin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775999350, "uuid": "cb8dfcdf-3670-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sdasrfj.zeq8morin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775999358, "uuid": "d08a3255-3670-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.15.16:37694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775999594, "uuid": "5cea7a82-3671-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.4.9:47466/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775999768, "uuid": "c505f779-3671-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pjrlyy.zeq8morin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776000132, "uuid": "9d96edca-3672-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://letteneed.zeq8morin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776000498, "uuid": "77d9a19e-3673-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.148.198.166:51569/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776000613, "uuid": "bc5a3c73-3673-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rur414-line.travixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776000968, "uuid": "8fcda7d4-3674-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tricrestum.travixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001090, "uuid": "d87c5a4b-3674-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.94.41.210:8080/update.ps1", "Tag": [ { "name": "130-94-41-210-8080", "colour": "#c255e0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001266, "uuid": "41de33f3-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/gehansa/3DS-Shader-Modifier/raw/refs/heads/main/logodaedaly/Shader_D_Modifier_v1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001266, "uuid": "41e66a04-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/gehansa/gehansa.github.io/refs/heads/main/impetition/io-gehansa-github-1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001267, "uuid": "423578a5-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/riskijeki57/Native-Snake-AI/raw/refs/heads/master/ovey/Snake-AI-Native-v3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001268, "uuid": "42ab0d4a-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/riskijeki57/Native-Snake-AI/refs/heads/master/ovey/Snake-AI-Native-v3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001270, "uuid": "43e60f4c-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/gehansa/3DS-Shader-Modifier/refs/heads/main/logodaedaly/Shader_D_Modifier_v1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001271, "uuid": "44b35416-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/riskijeki57/riskijeki57.github.io/raw/refs/heads/main/concupy/github_riskijeki_io_v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001273, "uuid": "45bebbf8-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/riskijeki57/riskijeki57.github.io/refs/heads/main/concupy/github_riskijeki_io_v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001277, "uuid": "4817e1f9-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/gehansa/gehansa.github.io/raw/refs/heads/main/impetition/io-gehansa-github-1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001392, "uuid": "8caf6d53-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sketcult.travixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001396, "uuid": "8edb0f09-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.81.22:57492/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001447, "uuid": "ad5a8030-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/AhmadShahid12/ahmadshahid12.github.io/refs/heads/main/semianarchist/github_ahmadshahid_io_2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001447, "uuid": "ad788d07-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/YawAmoah/yawamoah.github.io/raw/refs/heads/main/steppe/io-github-yawamoah-disbalancement.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001449, "uuid": "ae6aa843-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/AhmadShahid12/ft_transcendence/refs/heads/main/frontend/transcendence_ft_v2.5-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001449, "uuid": "aeae8613-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/su3488499/SourenDatta_Mega-HTML-CSS-Project_AeroUI-Design-System/raw/refs/heads/main/css/System-Datta-CS-HTM-U-Mega-Design-Souren-Aero-Project-cariama.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001451, "uuid": "afb00b92-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/YawAmoah/tetris-on-base/refs/heads/main/tetris-on-base/app/api/base_tetris_on_v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001451, "uuid": "afd1497d-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/AhmadShahid12/ahmadshahid12.github.io/raw/refs/heads/main/semianarchist/github_ahmadshahid_io_2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001452, "uuid": "b04293c3-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/YawAmoah/yawamoah.github.io/refs/heads/main/steppe/io-github-yawamoah-disbalancement.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001452, "uuid": "b08e7f39-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/su3488499/SourenDatta_Mega-HTML-CSS-Project_AeroUI-Design-System/refs/heads/main/css/System-Datta-CS-HTM-U-Mega-Design-Souren-Aero-Project-cariama.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001452, "uuid": "b09941c1-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/AhmadShahid12/ft_transcendence/raw/refs/heads/main/frontend/transcendence_ft_v2.5-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001452, "uuid": "b0bb793e-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/su3488499/su3488499.github.io/refs/heads/main/Brunelliaceae/io-github-su-v3.4-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001456, "uuid": "b2905af7-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/YawAmoah/tetris-on-base/raw/refs/heads/main/tetris-on-base/app/api/base_tetris_on_v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001508, "uuid": "d196748b-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/MTVCode97/long/refs/heads/main/long/long/message1.txt", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001512, "uuid": "d462cd8e-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/su3488499/su3488499.github.io/raw/refs/heads/main/Brunelliaceae/io-github-su-v3.4-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001512, "uuid": "d46d903b-3675-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/MTVCode97/long/raw/refs/heads/main/long/long/message1.txt", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001700, "uuid": "4429b99b-3676-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.42.27:37347/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001750, "uuid": "61f7713d-3676-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://n0hi.travixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001808, "uuid": "84a2af7c-3676-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Sha-dow837/Memory-Game/raw/refs/heads/main/overlinger/Game_Memory_1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001808, "uuid": "84b9ed20-3676-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/wmmahdi/wmmahdi.github.io/raw/refs/heads/main/uncolored/github-wmmahdi-io-v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001808, "uuid": "84c1694e-3676-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/wmmahdi/Rps-plus-gemini-ai/refs/heads/main/frontend/Rps-plus-ai-gemini-v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001808, "uuid": "84c9a27b-3676-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/PedraoDUgas/RaylibUE/raw/refs/heads/main/Source/RaylibUE/Private/Raylib-UE-v3.5-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001808, "uuid": "84d00681-3676-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/walletmfi/c64stream/raw/refs/heads/main/tools/stream-c-v1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001810, "uuid": "85e3a58c-3676-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/walletmfi/c64stream/refs/heads/main/tools/stream-c-v1.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001810, "uuid": "860c7018-3676-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/PedraoDUgas/RaylibUE/refs/heads/main/Source/RaylibUE/Private/Raylib-UE-v3.5-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001811, "uuid": "862a705a-3676-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Sha-dow837/curriculum/raw/refs/heads/master/javascript/javascript-playground-questions/js-beginning-and-end-pairs/Software_v2.0-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001812, "uuid": "8757041e-3676-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/wmmahdi/Rps-plus-gemini-ai/raw/refs/heads/main/frontend/Rps-plus-ai-gemini-v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001813, "uuid": "87868e5c-3676-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/wmmahdi/wmmahdi.github.io/refs/heads/main/uncolored/github-wmmahdi-io-v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001813, "uuid": "878d652a-3676-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Ozomake/lightbrush-moestradamus-art/raw/refs/heads/main/src/components/layout/moestradamus_art_lightbrush_v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001813, "uuid": "878e72ae-3676-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Sha-dow837/curriculum/refs/heads/master/javascript/javascript-playground-questions/js-beginning-and-end-pairs/Software_v2.0-alpha.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001813, "uuid": "87a0b1af-3676-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/michaelnxdstan/IntelligentVRAMNode/refs/heads/main/nimmer/Intelligent_VRAM_Node_v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001813, "uuid": "87a6685c-3676-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Ozomake/lightbrush-moestradamus-art/refs/heads/main/src/components/layout/moestradamus_art_lightbrush_v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001813, "uuid": "87cab726-3676-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/michaelnxdstan/IntelligentVRAMNode/raw/refs/heads/main/nimmer/Intelligent_VRAM_Node_v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776001814, "uuid": "888367f7-3676-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Sha-dow837/Memory-Game/refs/heads/main/overlinger/Game_Memory_1.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002108, "uuid": "373502bb-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://f0res-frame.travixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002168, "uuid": "5b1e10d0-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/bartgastra/web3-rpg/refs/heads/main/contracts/typechain-types/%40openzeppelin/contracts/utils/introspection/web_rpg_Verulamian.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002170, "uuid": "5c3d25ab-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/bartgastra/web3-rpg/raw/refs/heads/main/contracts/typechain-types/@openzeppelin/contracts/utils/introspection/web_rpg_Verulamian.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002170, "uuid": "5c77104a-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Manimahsoub/individual_level_project/refs/heads/main/pinny/project_level_individual_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002171, "uuid": "5ce278c4-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Manimahsoub/individual_level_project/raw/refs/heads/main/pinny/project_level_individual_v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002171, "uuid": "5d41d13b-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/aaradhya26/Lib/refs/heads/master/referral/Software-3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002171, "uuid": "5d4caba9-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/aaradhya26/swaybaeofficial-v2/raw/refs/heads/master/barrandite/swaybaeofficial_v_3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002172, "uuid": "5d824bf1-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/aaradhya26/Login-and-registration-using-Room-database/refs/heads/master/chord/Login_and_database_registration_Room_using_3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002172, "uuid": "5dc7f113-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/aaradhya26/swaybaeofficial-v2/refs/heads/master/barrandite/swaybaeofficial_v_3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002173, "uuid": "5e6e224f-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/aaradhya26/Lib/raw/refs/heads/master/referral/Software-3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002176, "uuid": "604ae560-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/aaradhya26/Login-and-registration-using-Room-database/raw/refs/heads/master/chord/Login_and_database_registration_Room_using_3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002292, "uuid": "a56bdd56-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Pranavchaure/Pong-Remake/refs/heads/main/stroup/Remake_Pong_v1.2-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002292, "uuid": "a56beb2e-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/GHost1959/indies-on-solana/refs/heads/main/.idea/inspectionProfiles/indies-solana-on-v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002293, "uuid": "a5a0ec6f-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Pranavchaure/Pong-Remake/raw/refs/heads/main/stroup/Remake_Pong_v1.2-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002294, "uuid": "a61e7945-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Pranavchaure/Live-Chat-App/refs/heads/main/backend/node_modules/undefsafe/lib/App-Chat-Live-2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002294, "uuid": "a61fb155-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quaxcheck.com.tr/api/d/chromelevator.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002294, "uuid": "a638388c-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/GHost1959/indies-on-solana/raw/refs/heads/main/.idea/inspectionProfiles/indies-solana-on-v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002296, "uuid": "a7610e53-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Pranavchaure/Travel-Website/refs/heads/main/images/Website-Travel-2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002297, "uuid": "a7ee7a08-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Pranavchaure/Travel-Website/raw/refs/heads/main/images/Website-Travel-2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002352, "uuid": "c8aca204-3677-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Pranavchaure/Live-Chat-App/raw/refs/heads/main/backend/node_modules/undefsafe/lib/App-Chat-Live-2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002533, "uuid": "3497003e-3678-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/edwindoremi/Asterisk/refs/heads/main/templates/Software_2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002533, "uuid": "34f858a9-3678-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/FauzanOktavianto/praktikum2020/refs/heads/master/Modul%20PDF/praktikum_2.9-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002533, "uuid": "34fa2a5a-3678-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/FauzanOktavianto/praktikum2020/raw/refs/heads/master/Modul%20PDF/praktikum_2.9-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002533, "uuid": "3511d894-3678-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/gilbertGabe/valthrun-cs2/refs/heads/main/radar/shared/src/bin/valthrun_cs_v3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002534, "uuid": "351d5ca4-3678-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/FauzanOktavianto/Website-KP/raw/refs/heads/main/one-health/assets/Website_KP_2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002534, "uuid": "352b5182-3678-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/gilbertGabe/valthrun-cs2/raw/refs/heads/main/radar/shared/src/bin/valthrun_cs_v3.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002534, "uuid": "352b6b2c-3678-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/gilbertGabe/tuneskit-iphone-unlocker-2-5-0-9-premium-tools/raw/refs/heads/branch/overfearful/premium_iphone_unlocker_tools_tuneskit_2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002534, "uuid": "35439fc4-3678-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/FauzanOktavianto/Website-KP/refs/heads/main/one-health/assets/Website_KP_2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002537, "uuid": "370e566d-3678-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/gilbertGabe/tuneskit-iphone-unlocker-2-5-0-9-premium-tools/refs/heads/branch/overfearful/premium_iphone_unlocker_tools_tuneskit_2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002537, "uuid": "3713cd7c-3678-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/edwindoremi/Asterisk/raw/refs/heads/main/templates/Software_2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002660, "uuid": "80ab3798-3678-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.171.121:45571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776002831, "uuid": "e633c6bf-3678-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-f0x.travixon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776003015, "uuid": "53fe5f13-3679-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://basi-sand.bry5laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776003015, "uuid": "543a659a-3679-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.60.241.29/kkkzzz.zip", "Tag": [ { "name": "38-60-241-29", "colour": "#51224a", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776003321, "uuid": "0ac39792-367a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.42.27:37347/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776003375, "uuid": "2a9dbc52-367a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sol-draon.bry5laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776003727, "uuid": "fc7d9e33-367a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.165.93.226:47404/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776003740, "uuid": "0443fbd7-367b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5ap-pulse.bry5laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776003978, "uuid": "922cd4b8-367b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.247.137:41605/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776004396, "uuid": "8b12eaa3-367c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cliff-hinge.bry5laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776004403, "uuid": "8f89b7ec-367c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.100.39:60234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776004576, "uuid": "f6c9f5bb-367c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://freightrap.bry5laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776005174, "uuid": "5b2dd6f3-367e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://printscar.bry5laxon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776005414, "uuid": "e9c1dac3-367e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gr1m-forge.norxevin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776005429, "uuid": "f302776a-367e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.89.181:39639/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776005712, "uuid": "9b5b3c0b-367f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hoyjyxdc.norxevin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776005721, "uuid": "a0d03601-367f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.33.206:35711/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776005789, "uuid": "c9878bfc-367f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.100.39:60234/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006072, "uuid": "7257ee2d-3680-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dockbrok.norxevin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006085, "uuid": "79b205e6-3680-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.247.137:41605/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006188, "uuid": "b71e6038-3680-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.123/MidwestGrey.exe", "Tag": [ { "name": "43-228-157-123", "colour": "#ff1db9", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006191, "uuid": "b8efe34d-3680-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.123/kfhogts", "Tag": [ { "name": "43-228-157-123", "colour": "#ff1db9", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006427, "uuid": "458b031f-3681-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.165.93.226:47404/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006488, "uuid": "6a51240c-3681-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://imag-media.norxevin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006608, "uuid": "b1d835c4-3681-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/absencecampstool380/server-query-fake-player-count/refs/heads/main/embark/player-fake-server-query-count-2.9-alpha.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006613, "uuid": "b45ff71d-3681-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.4.198:34019/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006614, "uuid": "b53975f5-3681-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/absencecampstool380/server-query-fake-player-count/raw/refs/heads/main/embark/player-fake-server-query-count-2.9-alpha.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006669, "uuid": "d6084195-3681-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://31.57.97.180/farhoud/WsFR9o7.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006681, "uuid": "dd22c92c-3681-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.105///arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776006912, "uuid": "672db301-3682-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://merdraex.norxevin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776007086, "uuid": "ce772629-3682-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/col.sh", "Tag": [ { "name": "196-251-107-133", "colour": "#dafeb8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776007086, "uuid": "ce774307-3682-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/kla2.sh", "Tag": [ { "name": "196-251-107-133", "colour": "#dafeb8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776007086, "uuid": "ce8aa93d-3682-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/bin", "Tag": [ { "name": "196-251-107-133", "colour": "#dafeb8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776007145, "uuid": "f1beaa47-3682-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/yarn", "Tag": [ { "name": "196-251-107-133", "colour": "#dafeb8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776007159, "uuid": "fa3b589a-3682-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.33.206:35711/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776007333, "uuid": "62023448-3683-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ridg31-drive.norxevin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776007347, "uuid": "6a1ef757-3683-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.225.103.254:33705/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776007640, "uuid": "19166fd7-3684-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.13.110:56345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776007751, "uuid": "5b319790-3684-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sound3-gate.qul2marox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776008111, "uuid": "31cb6a1b-3685-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cddvp.qul2marox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776008531, "uuid": "2bdcf696-3686-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://t3st1-track.qul2marox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776008661, "uuid": "7930c99c-3686-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://like.exphelp.life/DivineX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: dx2026", "colour": "#48f582", "exportable": true, "hide_tag": false }, { "name": "pw-dx2026", "colour": "#d631c5", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776008674, "uuid": "80e71367-3686-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://low.exphelp.life/DivineX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: dx2026", "colour": "#48f582", "exportable": true, "hide_tag": false }, { "name": "pw-dx2026", "colour": "#d631c5", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776008892, "uuid": "03313b86-3687-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yjcyrpx.qul2marox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776008897, "uuid": "0639ff17-3687-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.13.110:56345/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776009128, "uuid": "8f7988ac-3687-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.225.103.254:33705/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776009321, "uuid": "02cb92e9-3688-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.220.233:55009/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776009321, "uuid": "02e682a4-3688-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.36.107.247:37323/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776009556, "uuid": "8e949707-3688-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://colorpastur.qul2marox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776009788, "uuid": "1954303a-3689-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.188.223:47326/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776009789, "uuid": "1976a4ed-3689-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.193.49.1:55034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776009793, "uuid": "1beca778-3689-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pquyrk.qul2marox.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776010152, "uuid": "f20d3f88-3689-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://opticsswi.con9uerbunker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776010221, "uuid": "1b45e4ef-368a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.220.216:37586/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776010577, "uuid": "ef1bd09a-368a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://reso1-cast.con9uerbunker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776010875, "uuid": "a0ffda38-368b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://v1al-sheet.con9uerbunker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776011293, "uuid": "99fff639-368c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://exposmot.con9uerbunker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776011302, "uuid": "9f5b4640-368c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.188.223:47326/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776011554, "uuid": "35f5c6ab-368d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.253.133.48:42624/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776011645, "uuid": "6be9806b-368d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/ja/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776011713, "uuid": "9493bd51-368d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://b4y-signal.con9uerbunker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012070, "uuid": "69343f01-368e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.37.150/huhu/titanjr.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012073, "uuid": "6ada882e-368e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.37.150/huhu/titanjr.ppc440", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012073, "uuid": "6ada8e83-368e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.37.150/huhu/titanjr.mipsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012073, "uuid": "6ada9467-368e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.37.150/huhu/titanjr.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012073, "uuid": "6ae0aef0-368e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.37.150/huhu/titanjr.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012073, "uuid": "6ae2a568-368e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.37.150/huhu/titanjr.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012073, "uuid": "6ae2fd2b-368e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.37.150/huhu/titanjr.x86_32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012073, "uuid": "6ae714eb-368e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.37.150/huhu/titanjr.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012073, "uuid": "6ae719ce-368e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.37.150/huhu/titanjr.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012073, "uuid": "6ae726fa-368e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.37.150/huhu/titanjr.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012083, "uuid": "70e8ffc8-368e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.37.150/huhu/titanjr.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012083, "uuid": "70e94700-368e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.37.150/huhu/titanjr.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012083, "uuid": "70eac285-368e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.37.150/huhu/titanjr.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012083, "uuid": "70eb801b-368e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.37.150/huhu/titanjr.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012083, "uuid": "70ed09f8-368e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.37.150/huhu/titanjr.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012134, "uuid": "8f81ea60-368e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://royalemb.con9uerbunker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012434, "uuid": "4215de2d-368f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clinicfjord.recogniz-rural.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012436, "uuid": "4366cf8e-368f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.193.49.1:55034/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012727, "uuid": "f113e68a-368f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.32.65.48:58765/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012911, "uuid": "5e93c729-3690-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.253.133.48:42624/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776012914, "uuid": "602301e1-3690-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vk05p.recogniz-rural.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776013102, "uuid": "d044cc39-3690-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.46.83:56863/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776013279, "uuid": "39b33137-3691-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lyav76.recogniz-rural.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776013694, "uuid": "3167ade2-3692-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://macrosummit.recogniz-rural.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776014069, "uuid": "10ed8bfc-3693-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.204.233:51782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776014117, "uuid": "2d1df900-3693-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pale-prime.recogniz-rural.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776014226, "uuid": "6e741dac-3693-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.32.65.48:58765/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776014471, "uuid": "009b76d2-3694-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nkhpvbun.recogniz-rural.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776014477, "uuid": "03e17ac3-3694-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.145.139:57984/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776014720, "uuid": "95155820-3694-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.46.83:56863/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776014833, "uuid": "d858a7fe-3694-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cell4-stream.2rmpitoutstand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776015311, "uuid": "f52809b9-3695-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://atomicatom.2rmpitoutstand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776015501, "uuid": "668a80b9-3696-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.204.233:51782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776015732, "uuid": "f0336bbc-3696-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://southspring.2rmpitoutstand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776015739, "uuid": "f47139d6-3696-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.138.190:53134/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776015740, "uuid": "f4fa1893-3696-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.75.142:55572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776016033, "uuid": "a3437143-3697-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.215.30:41418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776016093, "uuid": "c736560e-3697-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.229.210:46613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776016147, "uuid": "e743aaba-3697-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blwaa.2rmpitoutstand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776016514, "uuid": "c1fe2456-3698-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://abncti.2rmpitoutstand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776016819, "uuid": "782b0e23-3699-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.176.104.127:38960/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776016930, "uuid": "ba17eaca-3699-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5ummi5-mark.2rmpitoutstand.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776016932, "uuid": "bb031ec9-3699-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.86.75:36056/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776017290, "uuid": "9087e38d-369a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://izdmpn.far-guess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776017590, "uuid": "433dee1f-369b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.205.35:34082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776017709, "uuid": "8a2bf835-369b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kvtk.far-guess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776018010, "uuid": "3e188a40-369c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://olxx.far-guess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776018076, "uuid": "6556bf77-369c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.253.228:48676/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776018131, "uuid": "85e4395d-369c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.176.104.127:38960/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776018431, "uuid": "38d0bc93-369d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vitalpure.far-guess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776018611, "uuid": "a3c3f34f-369d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.198.173:40926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776018611, "uuid": "a4267d08-369d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.192.233.49:51550/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776018679, "uuid": "cc865e21-369d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.229.210:46613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776018793, "uuid": "104bb769-369e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://review-spr.far-guess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776019212, "uuid": "0a50aa79-369f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://snow-cache.far-guess.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776019393, "uuid": "76588326-369f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.53.122:44306/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776019398, "uuid": "79501e6f-369f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.53.122:44306/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776019456, "uuid": "9b9c5fbb-369f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.227.254:59558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776019456, "uuid": "9bebe19f-369f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.10.132.168:42905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776019628, "uuid": "024cecd8-36a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ht1eqo.suicideva1ny.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020056, "uuid": "019bfd4b-36a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynvenis5.suicideva1ny.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020179, "uuid": "4ac63802-36a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.23.135.140:35197/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020346, "uuid": "ae3c2a1f-36a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://switchfresh.suicideva1ny.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020421, "uuid": "db1c8955-36a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.207.21:46533/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020593, "uuid": "41a10c76-36a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bot_armv7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020595, "uuid": "426c1216-36a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/adb3.go", "Tag": [ { "name": "Go", "colour": "#7e78ab", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020596, "uuid": "431587c6-36a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/armv7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020596, "uuid": "4315aeca-36a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bot_aarch64", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020654, "uuid": "65b1c478-36a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/adb2.go", "Tag": [ { "name": "Go", "colour": "#7e78ab", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020656, "uuid": "66c3e665-36a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bot", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020656, "uuid": "66c8d3d4-36a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/s", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020656, "uuid": "66d21817-36a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bot_arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020656, "uuid": "66d84d35-36a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bot_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020656, "uuid": "66dd508e-36a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bot_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020656, "uuid": "66de4f2a-36a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/bot_mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020656, "uuid": "66e73c25-36a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020769, "uuid": "aa9929fd-36a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coral5-index.suicideva1ny.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776020898, "uuid": "f76df55c-36a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.227.254:59558/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776021009, "uuid": "3934dd1b-36a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.52/payload", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776021013, "uuid": "3bdd9fa7-36a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://41uml3.suicideva1ny.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776021078, "uuid": "62386ae8-36a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.251.140:35341/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776021369, "uuid": "0fc47b41-36a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://1kuz.suicideva1ny.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776021793, "uuid": "0c7cf8dc-36a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://labellively.cytolo-gyywniak.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776021860, "uuid": "34a754a9-36a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.192.233.49:51550/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776021980, "uuid": "7bfb1818-36a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.207.21:46533/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776022027, "uuid": "9835d30b-36a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.164.96.190:33965/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776022334, "uuid": "4ed7b833-36a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://96rcki34.cytolo-gyywniak.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776022519, "uuid": "bd1a4a5e-36a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5ybzh.cytolo-gyywniak.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776022754, "uuid": "49347770-36a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arklinea.cytolo-gyywniak.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776022927, "uuid": "b07ef4c8-36a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.94.183:60744/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776022936, "uuid": "b61015f2-36a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.78.200:42234/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776023111, "uuid": "1e58a602-36a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.32.168:33964/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776023115, "uuid": "20c17f81-36a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://normarkix.cytolo-gyywniak.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776023416, "uuid": "d3eea13e-36a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://compute-comp.cytolo-gyywniak.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776023469, "uuid": "f3e417bd-36a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.175.211:38261/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776023768, "uuid": "a6081329-36a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sap-alp.charlotte5tereoph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776024072, "uuid": "5b393875-36aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sermarken6.charlotte5tereoph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776024125, "uuid": "7a8d211e-36aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.164.96.190:33965/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776024371, "uuid": "0d795a03-36ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.32.168:33964/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776024427, "uuid": "2e849870-36ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.94.183:60744/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776024434, "uuid": "32f141e7-36ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://systemott.charlotte5tereoph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776024558, "uuid": "7cb88132-36ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.89.27:54299/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776024730, "uuid": "e3630483-36ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jnza.charlotte5tereoph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776024800, "uuid": "0cacb292-36ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.81.106:50150/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776025027, "uuid": "944a5f8e-36ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.78:35416/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776025088, "uuid": "b8c22647-36ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vub10.charlotte5tereoph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776025211, "uuid": "01e8185c-36ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.175.211:38261/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776025447, "uuid": "8e697a2a-36ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c4p1-route.charlotte5tereoph.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776025631, "uuid": "fc545984-36ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://m9thskmy.paragonbloomera.digital/?=check&&actmn=GSGdFQyAJpakwztU", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776025813, "uuid": "68cd1652-36ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nmno.cash-guys.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776025879, "uuid": "8fe2b0d6-36ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.160.167:32981/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026057, "uuid": "fa0cce93-36ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/titanjr.spc", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026112, "uuid": "1aeef72b-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://publiccrawl.cash-guys.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "1d24ece0-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/titanjr.arm7", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "1d24ee7a-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/titanjr.ppc", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "1d2879ec-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/titanjr.m68k", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "1d292660-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/titanjr.arm5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "1d2c3b1e-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/titanjr.x86_64", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "1d2f8baa-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/titanjr.sh4", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "1d31d692-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/titanjr.x86_32", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "1d3544ef-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/titanjr.arm6", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026116, "uuid": "1d39253a-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/titanjr.mips", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026118, "uuid": "1e7a7736-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/titanjr.mipsl", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026118, "uuid": "1e7a7cf3-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/titanjr.arc", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026118, "uuid": "1e7ab4c8-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/titanjr.ppc440", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026181, "uuid": "4458661a-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/huhu/titanjr.arm5", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026181, "uuid": "445a57bd-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/huhu/titanjr.m68k", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026181, "uuid": "4460a4f1-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/huhu/titanjr.arm6", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026181, "uuid": "4464aa25-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/huhu/titanjr.sh4", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026181, "uuid": "4466297c-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/huhu/titanjr.ppc", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026181, "uuid": "446630f5-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/huhu/titanjr.ppc440", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026182, "uuid": "446b43b3-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/huhu/titanjr.x86_64", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026182, "uuid": "446b47d4-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/huhu/titanjr.mips", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026182, "uuid": "446b4812-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/huhu/titanjr.arc", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026182, "uuid": "446b4ae4-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/huhu/titanjr.x86_32", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026182, "uuid": "446b5068-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/huhu/titanjr.arm7", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026182, "uuid": "446c0cf4-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/huhu/titanjr.spc", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026182, "uuid": "44723d52-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/huhu/titanjr.mipsl", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026182, "uuid": "448fddbd-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/huhu/titanjr.i486", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026182, "uuid": "449c5363-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/huhu/titanjr.arm", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026182, "uuid": "449f8d78-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/titanjr.arm", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026182, "uuid": "44a9a028-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/huhu/titanjr.i686", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026182, "uuid": "44acdb7d-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/titanjr.i486", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026234, "uuid": "63e6568e-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/titanjr.i686", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026295, "uuid": "883f28ee-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.82/i686", "Tag": [ { "name": "46-151-182-82", "colour": "#bf0f8a", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026296, "uuid": "885ee9a5-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://43.228.157.127/all.sh", "Tag": [ { "name": "43-228-157-127", "colour": "#e6b818", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026349, "uuid": "a8367d5d-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.81.106:50150/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026412, "uuid": "cde7f92b-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://68df0.cash-guys.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026470, "uuid": "f04f5808-36af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.67.33.209:43975/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026526, "uuid": "11d2b92e-36b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.78:35416/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026713, "uuid": "816c3f83-36b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://moon0-logic.cash-guys.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776026958, "uuid": "134c59c9-36b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.209.196.193:33456/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776027020, "uuid": "3828252e-36b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.248.133:47220/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776027080, "uuid": "5c1cc520-36b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.149.107.54:38508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776027080, "uuid": "5c27a492-36b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.44.158:57124/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776027080, "uuid": "5c3c92a4-36b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.44.158:57124/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776027131, "uuid": "7a54cfc9-36b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fl0w-graph.cash-guys.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776027426, "uuid": "2a689a77-36b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.70.25:55329/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776027428, "uuid": "2b2f566d-36b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://apbc9a.cash-guys.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776027786, "uuid": "00ea63a6-36b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zenspireix9.disas5embsilence.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776028152, "uuid": "daa81b06-36b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://merspireos7.disas5embsilence.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776028211, "uuid": "fe347366-36b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.81.206:34521/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776028447, "uuid": "8a9010ea-36b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://agibny9n.disas5embsilence.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776028456, "uuid": "905f805c-36b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.198.34:53132/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776028457, "uuid": "90ad2490-36b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.248.133:47220/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776028638, "uuid": "fc8b6e2f-36b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.209.196.193:33456/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776028870, "uuid": "86ec1dc9-36b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://han9l.disas5embsilence.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776029113, "uuid": "1770e51c-36b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zl0dsl.disas5embsilence.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776029410, "uuid": "c87d262c-36b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://genelight.disas5embsilence.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776029771, "uuid": "9ffb7504-36b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.78:46837/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776029833, "uuid": "c5242f40-36b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://odau.clean-sorted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776029837, "uuid": "c7390451-36b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.198.34:53132/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776030127, "uuid": "74549e86-36b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lwzqvms.clean-sorted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776030260, "uuid": "c38a939c-36b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.152.16:60492/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776030489, "uuid": "4c221da0-36b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lum-lineos.clean-sorted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776030853, "uuid": "24b0eaee-36ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://opt1c-mesh.clean-sorted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776030921, "uuid": "4d1ae932-36ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.75.121:34429/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776031087, "uuid": "b049f237-36ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bkumfd.clean-sorted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776031150, "uuid": "d5ea4dd7-36ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.113.247:50135/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776031338, "uuid": "45a68f3a-36bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.77.63:46717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776031453, "uuid": "8a8c5ba7-36bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arknexal2.clean-sorted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776031590, "uuid": "dc53f825-36bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.116.78:46837/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776031759, "uuid": "40b70f29-36bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.152.16:60492/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776031815, "uuid": "61f18ffa-36bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gf11j.decembha1ifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776031881, "uuid": "896eb6fb-36bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.145.139:57984/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776031927, "uuid": "a4c8a13f-36bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.42.137:34610/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776032234, "uuid": "5bba607d-36bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://repairsales.decembha1ifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776032532, "uuid": "0da0c9d5-36be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://9rmc.decembha1ifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776032774, "uuid": "9dca1541-36be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://harves3-spark.decembha1ifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776033138, "uuid": "769a51af-36bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.77.63:46717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776033193, "uuid": "97aa577e-36bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trivenet8.decembha1ifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776033208, "uuid": "a0678965-36bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.230.19.188:56782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776033246, "uuid": "b751c188-36bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.149.120.3/download/net_launcher.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776033249, "uuid": "b915a322-36bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloudstorage-hub.com/cmd.bat", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776033250, "uuid": "b9505604-36bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloudstorage-hub.com/woofer.rar", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776033263, "uuid": "c18cfe06-36bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.100.197:57451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776033494, "uuid": "4ae818c3-36c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://winterdeliv.decembha1ifa.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776033852, "uuid": "208c7b02-36c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lvk5wwb.glasso-greconstruct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776033924, "uuid": "4b8f402f-36c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.217.75:45106/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776033968, "uuid": "6592a2c0-36c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.241.209:41905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776034162, "uuid": "d9339694-36c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.241.248:36637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776034216, "uuid": "f9177f04-36c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumtidea9.glasso-greconstruct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776034283, "uuid": "2181083e-36c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.121.187:47354/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776034339, "uuid": "42b9e720-36c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.53.147.17:46102/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776034516, "uuid": "ac4410e9-36c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://exte-lab.glasso-greconstruct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776034817, "uuid": "5f5c8026-36c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fiercepale.glasso-greconstruct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776035172, "uuid": "330ecbd8-36c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scre-wes.glasso-greconstruct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776035240, "uuid": "5bcb3283-36c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.241.209:41905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776035299, "uuid": "7efd69c1-36c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.10.132.168:42905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776035473, "uuid": "e656c3ea-36c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://needlsdk.glasso-greconstruct.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776035725, "uuid": "7ca75fa3-36c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.152.135:60762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776035888, "uuid": "ddb295a2-36c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xjmzl07n.habe7dpermanent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776035961, "uuid": "097284b0-36c6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.121.187:47354/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776036017, "uuid": "2aca3733-36c6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.30.145.246:42917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776036254, "uuid": "b84d3396-36c6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tal-crestal.habe7dpermanent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776036552, "uuid": "69e1dac5-36c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deal-mars.habe7dpermanent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776036618, "uuid": "912dad7f-36c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://168.227.66.219:52900/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776036853, "uuid": "1d45895f-36c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkcrest5or.habe7dpermanent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776037162, "uuid": "d528edc8-36c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.124.98:58896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776037214, "uuid": "f47485f3-36c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quormarkal8.habe7dpermanent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776037221, "uuid": "f88a920c-36c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.225.94:43318/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776037279, "uuid": "1b4c04e4-36c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.88:37256/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776037280, "uuid": "1baacbda-36c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.147.247:42849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776037338, "uuid": "3e4a7a3b-36c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.30.145.246:42917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776037627, "uuid": "ea3033f4-36c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.1.133:48547/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776037809, "uuid": "56ebec09-36ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dzokbx.habe7dpermanent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776037986, "uuid": "c0b58380-36ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cipherdepo.conferen-cesman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776038290, "uuid": "75ba9c6f-36cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-crest.conferen-cesman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776012725, "uuid": "efaa5e21-368f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.32.65.48", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775993525, "uuid": "3bc66b2c-3663-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.111.204.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775970245, "uuid": "07bf3630-362d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.63.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775978106, "uuid": "55588cab-363f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.93.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776007323, "uuid": "5bcac4b0-3683-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.225.103.254", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775974024, "uuid": "d42efd5c-3635-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.240.165.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775958064, "uuid": "ab50d3bf-3610-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.63.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775989446, "uuid": "bc3c4969-3659-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.107.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775964606, "uuid": "e66b008a-361f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.140.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776011524, "uuid": "23f2d77d-368d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.253.133.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775973664, "uuid": "fda26501-3634-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.157.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775957406, "uuid": "22e231dc-360f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.213.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776027424, "uuid": "290867b3-36b2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.70.25", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775978945, "uuid": "49488f5e-3641-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.217.123.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776033185, "uuid": "92f50c22-36bf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.230.19.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775986745, "uuid": "72338fb4-3653-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.161.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990885, "uuid": "15df6a2e-365d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.66.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776033907, "uuid": "413e02f3-36c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.217.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776031925, "uuid": "a385ab82-36bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.42.137", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994365, "uuid": "30093592-3665-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.247.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776037265, "uuid": "12bd07bf-36c9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.147.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776016084, "uuid": "c1fa7ff1-3697-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.229.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775976307, "uuid": "24a9ebb4-363b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.230.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001385, "uuid": "886a3c3e-3675-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.81.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002645, "uuid": "77972508-3678-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.171.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776005705, "uuid": "97872228-367f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.33.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775974265, "uuid": "63f081f6-3636-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.46.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775970484, "uuid": "96676d05-362d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.24.188.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776009784, "uuid": "16fae7e5-3689-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.188.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776003725, "uuid": "fb2027e7-367a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.165.93.226", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775962564, "uuid": "25b1e155-361b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.36.133.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775975407, "uuid": "0c2b1f56-3639-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.227.10.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776023105, "uuid": "1ae9cf5c-36a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.32.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776015725, "uuid": "ebc39323-3696-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.138.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775970125, "uuid": "c04305d7-362c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.132.166.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998807, "uuid": "87be0c4b-366f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.148.198.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775984645, "uuid": "8ec9eece-364e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.31.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775963525, "uuid": "6221c8ec-361d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.150.65", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775954884, "uuid": "43ee1903-3609-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.194.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776003965, "uuid": "8a7603a0-367b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.247.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775970606, "uuid": "dec2b585-362d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.38.134.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775986264, "uuid": "53f1b049-3652-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.152.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776037624, "uuid": "e8cb3002-36c9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.1.133", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997486, "uuid": "744edafc-366c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.8.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775977325, "uuid": "83975916-363d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.229.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775960106, "uuid": "6c34dc3c-3615-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.189.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775966525, "uuid": "5e3e9c3b-3624-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.252.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988725, "uuid": "0eceb658-3658-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.42.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775979725, "uuid": "1a5be2af-3643-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.156.42", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990706, "uuid": "ab47985b-365c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.231.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776030905, "uuid": "43dd9079-36ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.75.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001084, "uuid": "d568bbd8-3674-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "130.94.41.210", "Tag": [ { "name": "130-94-41-210-8080", "colour": "#c255e0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775977384, "uuid": "a718f4de-363d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.59.231.32", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776012065, "uuid": "660631c5-368e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "143.20.37.150", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775993644, "uuid": "82d1efb8-3663-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.36.188.81", "Tag": [ { "name": "154-36-188-81", "colour": "#d9cc8f", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PurpleFox", "colour": "#88dec9", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776016805, "uuid": "6fc7fb99-3699-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "160.176.104.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776036606, "uuid": "89edc380-36c7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "168.227.66.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776009306, "uuid": "fa00a401-3687-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.36.107.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776022025, "uuid": "96b68047-36a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.164.96.190", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775985725, "uuid": "124b75a6-3651-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.81.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775970065, "uuid": "9c541470-362c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.132.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776035708, "uuid": "72c402d0-36c5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.152.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775963945, "uuid": "5c889d7f-361e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.48.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990525, "uuid": "3f874e4d-365c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.118.247.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775973485, "uuid": "92a84c3b-3634-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.190.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775954884, "uuid": "43ee15d8-3609-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.164.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776013084, "uuid": "c58fa9ce-3690-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.46.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776033245, "uuid": "b6ba49f3-36bf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.100.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775985307, "uuid": "193fe213-3650-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.165.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776019385, "uuid": "71308d78-369f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.53.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776036006, "uuid": "2458ae6c-36c6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.30.145.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775991845, "uuid": "522a8318-365f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.233.89.32", "Tag": [ { "name": "193-233-89-32", "colour": "#6d4545", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775985848, "uuid": "5c081447-3651-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1ink.sox9liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776021365, "uuid": "0d5ce587-36a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1kuz.suicideva1ny.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775972225, "uuid": "a3c59a5d-3631-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "200.115.102.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776027064, "uuid": "52813f5d-36b1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.149.107.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776005406, "uuid": "e52cd2e0-367e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.107.89.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776019444, "uuid": "94542a7c-369f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "210.10.132.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775972284, "uuid": "c6f52478-3631-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.211.117.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992325, "uuid": "7030e54d-3660-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.160.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776023464, "uuid": "f0cd9ee9-36a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.175.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775961606, "uuid": "ea6853cd-3618-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.186.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775956265, "uuid": "7ac5a781-360c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.55.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775996765, "uuid": "c6878a44-366a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.58.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776018606, "uuid": "a0de1b7b-369d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.192.233.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776024544, "uuid": "7456f2a9-36ab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.202.89.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775993345, "uuid": "d02396ef-3662-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.146.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775978885, "uuid": "259578ab-3641-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.136.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776014464, "uuid": "fc01fb34-3693-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.145.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775996825, "uuid": "eab4f1fc-366a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.225.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776025865, "uuid": "877c7106-36ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.160.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776031144, "uuid": "d286900e-36ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.113.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776016025, "uuid": "9e65b300-3697-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.215.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775958185, "uuid": "f316156b-3610-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.80.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775961424, "uuid": "7e29d10d-3618-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.203.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776019444, "uuid": "94541af1-369f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.227.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776027005, "uuid": "2f157e96-36b1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.248.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776009784, "uuid": "16fafb21-3689-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.193.49.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990285, "uuid": "b0b0d53b-365b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.204.196.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775995925, "uuid": "d2093d94-3668-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.82.181", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776033966, "uuid": "6428bc09-36c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.241.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775989086, "uuid": "e5b7ac10-3658-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.45.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775975945, "uuid": "4cd327b6-363a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.102.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776016924, "uuid": "b68c8ae1-3699-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.86.75", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006664, "uuid": "d3428035-3681-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.57.97.180", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776004385, "uuid": "84c1f57b-367c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.100.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776015725, "uuid": "ebc386af-3696-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.75.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997124, "uuid": "9ce78f7a-366b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.26.86.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776034325, "uuid": "3a86ac5d-36c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.53.147.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776003006, "uuid": "4eff4f63-3679-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.60.241.29", "Tag": [ { "name": "38-60-241-29", "colour": "#51224a", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776031324, "uuid": "3dcb6cd5-36bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.77.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775955485, "uuid": "a9bc7d08-360a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.253.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775974565, "uuid": "1690544e-3637-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.31.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776021008, "uuid": "38b45c49-36a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "41uml3.suicideva1ny.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775958424, "uuid": "82049080-3611-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.101.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776014044, "uuid": "020bbae4-3693-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.204.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775995925, "uuid": "d2092bf7-3668-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.62.169", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988908, "uuid": "7b88b15c-3658-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.32.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775991725, "uuid": "0ad6179b-365f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.33.117", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775987045, "uuid": "254110d0-3654-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.161.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775989566, "uuid": "03c7d37d-365a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.141.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776034144, "uuid": "ce6ea1d2-36c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.241.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776030245, "uuid": "ba306965-36b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.152.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775965385, "uuid": "b6b104bc-3621-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.252.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775962506, "uuid": "032225de-361b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.29.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775984045, "uuid": "29081ed1-364d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.54.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775977806, "uuid": "a21b2bec-363e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.251.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775959624, "uuid": "4cf8dbc8-3614-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.113.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776003736, "uuid": "01946d37-367b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5ap-pulse.bry5laxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776016926, "uuid": "b7e9add8-3699-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5ummi5-mark.2rmpitoutstand.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775996524, "uuid": "3733e2a3-366a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5xhr.klinavor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776022512, "uuid": "b9749d2d-36a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5ybzh.cytolo-gyywniak.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775983144, "uuid": "10172bda-364b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.17.159.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994906, "uuid": "72a1bd5f-3666-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.11.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026944, "uuid": "0b0ec1e6-36b1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.209.196.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776037145, "uuid": "caee325c-36c8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.124.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775957824, "uuid": "1c2967c4-3610-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.133.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992325, "uuid": "702e8c14-3660-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.133.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775993944, "uuid": "35241a89-3664-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.133.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026407, "uuid": "caca0312-36af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "68df0.cash-guys.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775987406, "uuid": "fca2f2ae-3654-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "77vlmbv.xeltronix.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775986506, "uuid": "e429a0af-3652-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.192.27.231", "Tag": [ { "name": "85-192-27-231-8080", "colour": "#c535cd", "exportable": true, "hide_tag": false }, { "name": "Ligolo", "colour": "#BDEABC", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776022324, "uuid": "496016bf-36a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "96rcki34.cytolo-gyywniak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776032530, "uuid": "0c7e7ed8-36be-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "9rmc.decembha1ifa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775983865, "uuid": "bda966e9-364c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "a1ea.norqelix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776016504, "uuid": "bc5ed397-3698-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "abncti.2rmpitoutstand.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776028444, "uuid": "88fb0c25-36b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "agibny9n.disas5embsilence.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990231, "uuid": "90649102-365b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "anccompi.pra7vexal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776027424, "uuid": "290ecfcb-36b2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "apbc9a.cash-guys.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775980864, "uuid": "c13c7c51-3645-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api2-call.quv7maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775972829, "uuid": "0b9feccf-3633-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api2-cert.sox9liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775962744, "uuid": "90dc2d50-361b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api2-delta.zorvelixan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775979064, "uuid": "9040ea15-3641-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api2-jump.norqelix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775974744, "uuid": "813043f2-3637-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api2-port.travemox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775968750, "uuid": "8cdc30a5-3629-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api2-stage.veq4tralis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775971447, "uuid": "d42c19cf-362f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api4-sync.krynexor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994247, "uuid": "e9bab602-3664-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "app.cc-coins.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775976845, "uuid": "655a8436-363c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "app2-root.bri2xalon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775965025, "uuid": "e058f37a-3620-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "app3-frame.plu8moran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776036845, "uuid": "185cbdc0-36c8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkcrest5or.habe7dpermanent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776022747, "uuid": "453c7a93-36a7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arklinea.cytolo-gyywniak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776031445, "uuid": "85c9c249-36bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arknexal2.clean-sorted.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776015306, "uuid": "f21af9a3-3695-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "atomicatom.2rmpitoutstand.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775972464, "uuid": "3290594e-3632-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "auth1-user.sox9liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775984106, "uuid": "4d5b0769-364d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "b0x.bri2xalon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776011710, "uuid": "92da53cc-368d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "b4y-signal.con9uerbunker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775976484, "uuid": "8e73b803-363b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base1-site.bri2xalon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775962269, "uuid": "7550f2a5-361a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bash6-cmd.qul7vexar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776003011, "uuid": "519e5e7f-3679-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "basi-sand.bry5laxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775957646, "uuid": "b23357d1-360f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bin5-exec.bryo2maxil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776031084, "uuid": "aeab4e5d-36ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bkumfd.clean-sorted.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775973485, "uuid": "92af60b4-3634-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blob4-data.sox9liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776016144, "uuid": "e5bc8c80-3697-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blwaa.2rmpitoutstand.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775977505, "uuid": "eef71b69-363d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "box4-file.bri2xalon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776025444, "uuid": "8d17ce72-36ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "c4p1-route.charlotte5tereoph.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775969411, "uuid": "16a7c330-362b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "call4-back.veq4tralis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776008109, "uuid": "30704452-3685-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cddvp.qul2marox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776014829, "uuid": "d5b9cfad-3694-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cell4-stream.2rmpitoutstand.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776037985, "uuid": "bf8d13c3-36ca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cipherdepo.conferen-cesman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776004393, "uuid": "89342d78-367c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cliff-hinge.bry5laxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776012430, "uuid": "4017a1dc-368f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clinicfjord.recogniz-rural.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776033247, "uuid": "b8047c27-36bf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloudstorage-hub.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775993770, "uuid": "cdbc52d3-3663-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cmomy7g.vo3xiran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776009554, "uuid": "8d73b495-3688-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "colorpastur.qul2marox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776023411, "uuid": "d137bfef-36a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "compute-comp.cytolo-gyywniak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020766, "uuid": "a8b2f86d-36a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coral5-index.suicideva1ny.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775960344, "uuid": "fa557a2c-3615-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cron1-task.qul7vexar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775958665, "uuid": "118aa1ef-3612-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "css2-rule.norxelium.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775964724, "uuid": "2cd50a50-3620-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data2-fast.plu8moran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775991849, "uuid": "54c66d08-365f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dawnbold.drumoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775975469, "uuid": "31692b91-3639-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "db4-cache.travemox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776036545, "uuid": "655f916d-36c7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deal-mars.habe7dpermanent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998505, "uuid": "d436c9da-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deepoutl.zeq8morin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775956926, "uuid": "049fdef3-360e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dir3-index.bryo2maxil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006070, "uuid": "70ff17c6-3680-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dockbrok.norxevin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775958306, "uuid": "3b888b2f-3611-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dom1-tree.norxelium.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775995389, "uuid": "92e774c5-3667-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dosb0zd.vo3xiran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775991431, "uuid": "5b44864f-365e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dyndra8al.drumoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775996108, "uuid": "3f712e4b-3669-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynspireis.klinavor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020049, "uuid": "fd4d40cf-36a0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynvenis5.suicideva1ny.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776037805, "uuid": "54a80625-36ca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dzokbx.habe7dpermanent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775987825, "uuid": "f5fa1e0e-3655-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "enclin.xeltronix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776011291, "uuid": "98fa8ab6-368c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "exposmot.con9uerbunker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776034512, "uuid": "a99ec821-36c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "exte-lab.glasso-greconstruct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002105, "uuid": "35fb48e4-3677-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "f0res-frame.travixon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775985485, "uuid": "8330aab9-3650-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "f0rmate.para5itrecal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775952365, "uuid": "6646e6ab-3603-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "f13hwmuq.amb1ing-farm.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988970, "uuid": "a05d0165-3658-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "f1x8-point.pra7vexal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775984584, "uuid": "6a992e56-364e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fi1e.bri2xalon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776034813, "uuid": "5d0c7f71-36c3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fiercepale.glasso-greconstruct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775974446, "uuid": "cfe63fe0-3636-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "file1-swap.travemox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775956625, "uuid": "514b9da8-360d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "file2-obj.bryo2maxil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776027124, "uuid": "765bed54-36b1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fl0w-graph.cash-guys.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775962445, "uuid": "de6a88d7-361a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flow1-point.zorvelixan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775959985, "uuid": "2409a71c-3615-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "font6-face.norxelium.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776004564, "uuid": "efaabefd-367c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "freightrap.bry5laxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776038287, "uuid": "73c3b015-36cb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-crest.conferen-cesman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775974086, "uuid": "f8f0f6d0-3635-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-link.sox9liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775982185, "uuid": "d4a8f08e-3648-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-main.quv7maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775978165, "uuid": "7887de32-363f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-map.bri2xalon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775964006, "uuid": "80a31be8-361e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-post.zorvelixan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775968389, "uuid": "b532f386-3628-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-root.draxolin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776029406, "uuid": "c61c3ad7-36b6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "genelight.disas5embsilence.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776031812, "uuid": "608e1dc2-36bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gf11j.decembha1ifa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775993414, "uuid": "f94cfa03-3662-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "glypipeli.vo3xiran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775982250, "uuid": "fb0a595d-3648-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "goragalo.live" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776005411, "uuid": "e870007e-367e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gr1m-forge.norxevin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776028867, "uuid": "8510e577-36b5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "han9l.disas5embsilence.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776032771, "uuid": "9c4e5423-36be-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "harves3-spark.decembha1ifa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775953025, "uuid": "ef71a56a-3604-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hash3-list.zeq9lora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775954045, "uuid": "4fa5421f-3607-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hop6-route.zeq9lora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776005709, "uuid": "9a1f7f6a-367f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hoyjyxdc.norxevin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776019624, "uuid": "ffcdd4f5-369f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ht1eqo.suicideva1ny.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775965744, "uuid": "8d21f0e0-3622-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub5-local.plu8moran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775980444, "uuid": "c6df4d88-3644-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub6-area.norqelix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775972105, "uuid": "5c8faba6-3631-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub6-main.krynexor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775976184, "uuid": "dba753db-363a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub6-pipe.travemox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006486, "uuid": "68e74981-3681-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "imag-media.norxevin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775959624, "uuid": "4d01e318-3614-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "img5-asset.norxelium.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998927, "uuid": "cf7cfe86-366f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "irfy5j.zeq8morin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776017288, "uuid": "8f4bf225-369a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "izdmpn.far-guess.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776024728, "uuid": "e217e1c0-36ab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jnza.charlotte5tereoph.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775960647, "uuid": "af1728e7-3616-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "job2-run.qul7vexar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775959269, "uuid": "793c4a6e-3613-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "js4-script.norxelium.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990952, "uuid": "3e0ffc46-365d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jymbrdt.drumoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775989454, "uuid": "c0f87df8-3659-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kel-valear.pra7vexal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775986631, "uuid": "2e532530-3653-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ktvkmgqc.xeltronix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776017706, "uuid": "88709ef9-369b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kvtk.far-guess.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776021788, "uuid": "09dd3176-36a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "labellively.cytolo-gyywniak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776000130, "uuid": "9c39437f-3672-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "letteneed.zeq8morin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775958005, "uuid": "882a2fed-3610-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lib6-share.bryo2maxil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776008646, "uuid": "70b6b3f2-3686-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "like.exphelp.life" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775966344, "uuid": "f2a57cb5-3623-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "link1-host.draxolin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775970731, "uuid": "2960d651-362e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "list2-load.krynexor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776008646, "uuid": "70b9ee71-3686-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "low.exphelp.life" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776030485, "uuid": "49439f47-36b9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lum-lineos.clean-sorted.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776034212, "uuid": "f739fc19-36c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumtidea9.glasso-greconstruct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776033850, "uuid": "1f583609-36c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lvk5wwb.glasso-greconstruct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776030125, "uuid": "72f36f09-36b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lwzqvms.clean-sorted.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776013267, "uuid": "327aff34-3691-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lyav76.recogniz-rural.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776025628, "uuid": "fa8eb06e-36ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "m9thskmy.paragonbloomera.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775983088, "uuid": "ee7fddc6-364a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ma1n.quv7maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775952068, "uuid": "b59a8a4e-3602-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mac6-bind.krinoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776013688, "uuid": "2df33f41-3692-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "macrosummit.recogniz-rural.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775967430, "uuid": "798c11c0-3626-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main4-path.draxolin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775979549, "uuid": "b1222947-3642-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "map4-base.norqelix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776006910, "uuid": "65d930ce-3682-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "merdraex.norxevin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776028147, "uuid": "d7e41b5a-36b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "merspireos7.disas5embsilence.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992631, "uuid": "268095f4-3661-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-cornp.drumoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775996945, "uuid": "31e19f11-366b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mhkugefu.klinavor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994131, "uuid": "a4cba3b3-3664-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mogen.vo3xiran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026706, "uuid": "7cdc5713-36b0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "moon0-logic.cash-guys.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001747, "uuid": "601cc110-3676-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "n0hi.travixon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776035469, "uuid": "e3e67c7c-36c4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "needlsdk.glasso-greconstruct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002828, "uuid": "e49aca78-3678-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-f0x.travixon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994548, "uuid": "9d52879e-3665-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neura-vector.vo3xiran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988190, "uuid": "cfd1fc2e-3656-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nf59jdtk.xeltronix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776014469, "uuid": "ff698aa0-3693-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nkhpvbun.recogniz-rural.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776025808, "uuid": "658581c4-36ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nmno.cash-guys.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775963044, "uuid": "43b4b3ee-361c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-alpha.zorvelixan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775971085, "uuid": "fc868902-362e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-core.krynexor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775977144, "uuid": "17bb856c-363d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-flag.bri2xalon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775975165, "uuid": "7c54e237-3638-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-link.travemox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775973125, "uuid": "bc2bb415-3633-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-pack.sox9liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775979306, "uuid": "2099b638-3642-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-push.norqelix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775981165, "uuid": "74684191-3646-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-soft.quv7maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775969045, "uuid": "3c6ac6d5-362a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-view.veq4tralis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775985311, "uuid": "1bd7c608-3650-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3.travemox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776023105, "uuid": "1af66f37-36a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "normarkix.cytolo-gyywniak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776029828, "uuid": "c1ea52e6-36b7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "odau.clean-sorted.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776018006, "uuid": "3b4195da-369c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "olxx.far-guess.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776030845, "uuid": "1fe87e32-36ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "opt1c-mesh.clean-sorted.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776010150, "uuid": "f105b3d7-3689-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "opticsswi.con9uerbunker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992985, "uuid": "f9a4becc-3661-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "outletarray.drumoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776014113, "uuid": "2ae12df4-3693-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pale-prime.recogniz-rural.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775952244, "uuid": "1e73ef5b-3603-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "peer1-link.zeq9lora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775966713, "uuid": "ce9e1213-3624-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "peer2-join.draxolin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775960944, "uuid": "6007402f-3617-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pid3-check.qul7vexar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775953864, "uuid": "e3af19b5-3606-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ping5-test.zeq9lora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775999765, "uuid": "c2b589ca-3671-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pjrlyy.zeq8morin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992090, "uuid": "e4955611-365f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pl.avgkrbw.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775966045, "uuid": "40079853-3623-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "port6-send.plu8moran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776009790, "uuid": "1a4b7457-3689-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pquyrk.qul2marox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776005172, "uuid": "59e971dd-367e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "printscar.bry5laxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775955665, "uuid": "1528626c-360b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ptr5-rev.travexon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776026109, "uuid": "18f6f0ee-36af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "publiccrawl.cash-guys.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775994967, "uuid": "9705443e-3666-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pulse1-phase.vo3xiran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776002290, "uuid": "a3f82f6f-3677-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quaxcheck.com.tr" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776037211, "uuid": "f2956167-36c8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quormarkal8.habe7dpermanent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775956265, "uuid": "7ad534c3-360c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "raw1-blob.bryo2maxil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775978528, "uuid": "50eaf44e-3640-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "read1-data.norqelix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775954584, "uuid": "9122d5c3-3608-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rec2-record.travexon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776032231, "uuid": "59ead969-36bd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "repairsales.decembha1ifa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776010570, "uuid": "eb52e5bd-368a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "reso1-cast.con9uerbunker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776018786, "uuid": "0ca1f9d4-369e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "review-spr.far-guess.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776007328, "uuid": "5f11575a-3683-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ridg31-drive.norxevin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775995808, "uuid": "8c968d24-3668-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rn1no-hold.klinavor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776012132, "uuid": "8e0ea408-368e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "royalemb.con9uerbunker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776000607, "uuid": "b8ff0270-3673-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rur414-line.travixon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775953266, "uuid": "7f1ce343-3605-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "salt4-byte.zeq9lora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776023766, "uuid": "a47956cb-36a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sap-alp.charlotte5tereoph.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775998205, "uuid": "21432476-366e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sapcha.zeq8morin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775992209, "uuid": "2b3d921e-3660-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "scalelabel.drumoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776035167, "uuid": "306f6f76-36c4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "scre-wes.glasso-greconstruct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775999345, "uuid": "c8e60f78-3670-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sdasrfj.zeq8morin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775952845, "uuid": "849f14f8-3604-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "seed2-node.zeq9lora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775986207, "uuid": "31832f34-3652-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "serlith5ex.xeltronix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776024064, "uuid": "5661b9a2-36aa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sermarken6.charlotte5tereoph.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775964365, "uuid": "569fe976-361f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "site1-proxy.plu8moran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776001387, "uuid": "89b5aa69-3675-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sketcult.travixon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776019207, "uuid": "075dfc91-369f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "snow-cache.far-guess.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775955247, "uuid": "1bdb820f-360a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soa4-start.travexon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775965447, "uuid": "dbda7dcb-3621-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft4-base.plu8moran.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776003372, "uuid": "28cfba27-367a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sol-draon.bry5laxon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776007749, "uuid": "59fa80b9-3684-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sound3-gate.qul2marox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776015725, "uuid": "ebcf1d48-3696-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "southspring.2rmpitoutstand.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997306, "uuid": "09424342-366c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sparrowultra.klinavor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775967131, "uuid": "c7463bbc-3625-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "srv3-ready.draxolin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775961724, "uuid": "30b27463-3619-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stat5-info.qul7vexar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775970430, "uuid": "75b01154-362d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "step1-item.krynexor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775990651, "uuid": "8a66ebb1-365c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sub-runvv.pra7vexal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775997787, "uuid": "27ba6e1e-366d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "summ4-field.klinavor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775973785, "uuid": "458d6141-3635-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-edge.sox9liven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775979847, "uuid": "62e58998-3643-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-flow.norqelix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775977864, "uuid": "c4fb045f-363e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-info.bri2xalon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775981884, "uuid": "21554d76-3648-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-relay.quv7maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775971747, "uuid": "86d1ebe1-3630-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-rule.krynexor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775975830, "uuid": "0870789a-363a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-scan.travemox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775969707, "uuid": "c71924b4-362b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-task.veq4tralis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776020344, "uuid": "acf64618-36a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "switchfresh.suicideva1ny.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775963348, "uuid": "f89c1466-361c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sync4-meta.zorvelixan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776024427, "uuid": "2ecbe949-36ab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "systemott.charlotte5tereoph.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776008525, "uuid": "2823b9c7-3686-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "t3st1-track.qul2marox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775959025, "uuid": "e7f17cc8-3612-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tag3-attr.norxelium.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776036252, "uuid": "b6d9b75a-36c6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tal-crestal.habe7dpermanent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775980628, "uuid": "341b0d59-3645-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "test1-run.quv7maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775989752, "uuid": "726fbcaa-365a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "timbecor.pra7vexal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775957285, "uuid": "da998cfd-360e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tmp4-path.bryo2maxil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775986989, "uuid": "039348e5-3654-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "toke-plate.xeltronix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775961306, "uuid": "375a93b1-3618-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "top4-load.qul7vexar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776000965, "uuid": "8e051865-3674-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tricrestum.travixon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776033191, "uuid": "9631e756-36bf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trivenet8.decembha1ifa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775954945, "uuid": "67f5a8a2-3609-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ttl3-limit.travexon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775955964, "uuid": "c7792910-360b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "txt6-info.travexon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775967850, "uuid": "74686cc6-3627-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "unit5-mesh.draxolin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776010871, "uuid": "9e7d9177-368b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "v1al-sheet.con9uerbunker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775981525, "uuid": "4b09028a-3647-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault4-key.quv7maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776018428, "uuid": "36fb026f-369d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vitalpure.far-guess.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776012911, "uuid": "5ec57a38-3690-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vk05p.recogniz-rural.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776025086, "uuid": "b777c55a-36ac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vub10.charlotte5tereoph.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775970065, "uuid": "9c675fe5-362c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "way6-gate.veq4tralis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775963706, "uuid": "ce16b009-361d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "web5-relay.zorvelixan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776033492, "uuid": "49aff987-36c0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "winterdeliv.decembha1ifa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775968565, "uuid": "1e62ddab-3629-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "work1-area.veq4tralis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776035884, "uuid": "dba19b03-36c5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xjmzl07n.habe7dpermanent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776008890, "uuid": "01c232cd-3687-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yjcyrpx.qul2marox.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775988617, "uuid": "ce1790bc-3657-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zendra6a.pra7vexal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776027783, "uuid": "ff32cd73-36b2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zenspireix9.disas5embsilence.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776029107, "uuid": "146f9742-36b6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zl0dsl.disas5embsilence.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775954284, "uuid": "de39b18b-3607-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zone1-dns.travexon.in.net" } ] } }