{ "Event": { "published": true, "date": "2026-04-10", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-10", "timestamp": 1775866524, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "5adc09f9-572e-408d-accf-8983e89fa769", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1775779458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775779458, "uuid": "2d8641e8-6e2f-4882-acee-769e21511b1c", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775779458, "uuid": "4c6051ba-c626-4d02-8d6a-cb5e81091fb6", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775779458, "uuid": "0a16742e-d501-44af-8d55-52a1f3fe5e2b", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775779458, "uuid": "0efd53b4-f53a-4292-b940-77f2a562fd3b", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775779458, "uuid": "f4e56c57-3a61-47fb-b00b-2d8c85f497dd", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1775780660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775780660, "uuid": "0288dce9-da06-4489-8938-cec6a90d9e29", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775780660, "uuid": "dfa61b14-0f59-41f1-b154-eca7bd86dd0b", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775780660, "uuid": "8b8d3ba7-c54b-4463-9c63-f65038cc7d7b", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775780660, "uuid": "80667731-e248-4c1b-a470-5b449830b393", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775780660, "uuid": "76d91dde-59b1-4bec-90cc-92c1a4252e6d", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d75182dd-3481-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775786769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775786769, "uuid": "f59ea309-123c-41cb-9167-2aaa0cdec45b", "comment": "Malware payload", "value": "699ceef67f0583fed1f45c4e8cfa553d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775786769, "uuid": "84fc647f-2e01-4b4e-bbc4-162f4955564d", "comment": "Malware payload", "value": "474ed00146a66c81612448ed264e53e790cf2f12e5f6d90be7ad02791e8b6f77", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775786769, "uuid": "9bd402bb-c452-49f0-8ac3-477695fe956d", "value": "T1B2968C07EC9115E9C0A9E2348A769252BA717C486F3537D32B90F7382F77BD0AA797", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775786769, "uuid": "9aba1627-50a1-4592-a274-2adc6431fa40", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775786769, "uuid": "5b6153c0-593f-4bb1-a043-ae99ae49b368", "value": "98304:HjVKqmb6U01yG/cwAtGTSwnI6jo5ujNXjvEkYwY3Z9sd9En:HMqw6U9G/c9GWwI6joAjNzsxvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775786769, "uuid": "e59b11de-21a0-4413-990d-fe20256c2444", "value": 8708608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775786769, "uuid": "62a60ef1-dbee-4688-b768-48a624c0644f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffb8fe09-3481-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775786837, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775786837, "uuid": "8c7ee2ce-1599-4090-8136-b046d14ac4d0", "comment": "Malware payload", "value": "b3223c74932a92e79c7a9875759906b0", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775786837, "uuid": "0089a0ad-ec3c-42b5-97e7-d5e951daa574", "comment": "Malware payload", "value": "1ebb03f11c7356520fc8bac4a7b49c83760740a3e00eb00309096cacca50bcc0", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775786837, "uuid": "260e6408-f9fd-4694-9241-efc81a052644", "value": "T1B2E0C00C74800873BD369CF9BAD73584810FC35E3D0EB59CC294241FB4F4890A0008", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775786837, "uuid": "2927f7c2-62ea-4d07-b493-4ff0d57c8e2e", "value": "6:/24J+d9FENsRV6M5dOuRVYyttxYZo0I9nZKY3FsDKVKhOXqIKLsVKhOXqIKa03Ix:/24J+zF8sbYuRrFYZoDZYWghsOLsghsX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775786837, "uuid": "e9b2c7ba-b70c-4eb3-8d6d-d2a26a59c58a", "value": 365, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775786837, "uuid": "f33a324f-8819-4967-ba2c-ca32e5b35987", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a0bc577-3482-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775787069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775787069, "uuid": "059fa0fd-cabf-45a6-ace0-221fe596d5fc", "comment": "Malware payload", "value": "787ea1aaa7dc45990edab0db1305b9b4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775787069, "uuid": "a4e65ab2-78da-4418-80a3-41506b2bd39b", "comment": "Malware payload", "value": "86372a9e92d7b642d1231f5f872343c55ae9a48f39d25aa3f5f6ce5e479ed33d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775787069, "uuid": "3deb1c54-0541-4ce0-91c3-f419fab70b65", "value": "T1268309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775787069, "uuid": "1165f575-09c9-4797-97bc-bf5a5c4f5d90", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnAWayVN/:XEKltp9txAX/yr2pbAWzVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775787069, "uuid": "74336a01-889e-43d7-9a9c-bc1f476e856c", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775787069, "uuid": "35bfb962-c49a-4e06-a24c-f5bf1cef208d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775788326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775788326, "uuid": "4c1b295b-8a5b-446d-8d51-54c9591eab82", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775788326, "uuid": "4f4d4631-a7a7-47a9-b145-f1e032cd85e1", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775788326, "uuid": "3abe2b0b-9a41-441a-8890-e54df5ffc0cb", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775788326, "uuid": "d6f6d42f-2a06-422f-8882-dfd777a809af", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775788326, "uuid": "912a146c-7861-4c50-86b1-92773cee80f4", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d64452f-3489-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775789893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "66b347e3-136e-4d40-9aa6-c1c0ef7a7a10", "comment": "Malware payload", "value": "d5a091efc40ccd06b0533f4aaf0b6c68", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "7d1a283b-b037-4f0e-a5fb-a83c3a3ae2c7", "comment": "Malware payload", "value": "7446120b08796be76901c3d05b5598afab082aec3b71764f28deef0f9d22d111", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "847721f1-c963-4930-9dea-f178fb310bdc", "value": "T18C533B22BA721C27C4D4657A61F70335F2F6838A14BC8A173DB10D8DBFA5A4036677", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "2e044386-82e7-415d-a1b7-30991f115fbb", "value": "768:uJVdeetU0cpZRHteO+N5RdIBR9mYc6d55iJWkreTVECD0x1tY7LsIc:uXQe20itsNejHx/5tYuKntYfsT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775789893, "uuid": "47d5fea1-2af0-4dfc-bfeb-93db78fd2e63", "value": 63172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "96b0de72-1535-470b-a97d-fe6734adfce9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d69d5c0-3489-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775789893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "8058c825-93e2-4df3-b362-cc50e749e8bc", "comment": "Malware payload (Mirai)", "value": "00b860df0f0b3900c23aa79b1926e008", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "361c4362-5a1e-4ab6-a725-35ac7e049e41", "comment": "Malware payload (Mirai)", "value": "8a9617817b4fb8ab8c31c7e9c6803eacfb51c5daecf05b56d87f6190eed50df4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "8cda7f9d-ff42-4601-a968-def386080f73", "value": "T1AAE2D09D95396489CF9EECB55A4E1BB403C4F020729F9ACA3B1059CCDF06A8F7A4D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "e558ffa5-6611-4605-b009-30f0052692e7", "value": "768:r55rKXkS+rX+Z2IBB4Z/J7Fc0KkDMyQvWF:PuG+D4ZBRcKh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775789893, "uuid": "60b2a009-30ec-429a-8123-ff5bb64065ab", "value": 33116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "37ef57d9-25d3-49e4-b2eb-281b04a85c2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d6a564e-3489-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775789893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "856f765f-f523-4b0e-a756-a8a8cd972d52", "comment": "Malware payload", "value": "f2da611352d743684ceef3940b705e12", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "c1e03266-1448-4217-9e73-9549a1e43681", "comment": "Malware payload", "value": "45b65480013c10804d62542047321f6692736b9d45725d74f674b55a02d6373d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "228eed4c-ab4e-4063-a5dd-3567b74d3fd9", "value": "T1D4F2B5616505B5BCF8A800BCF54B21B625934C687D6CF3D7A087763AFBB474C2CA6E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "61c2eddf-82b0-4213-b234-c2768630f1de", "value": "384:R7rBnn56cW6XhfkNJUnLc2OVIrYQ0FmbW++T6zB1S3h96bBChphsszt1jk49PX1X:R5n5WqqToYr0g3hUdFfW1X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775789893, "uuid": "fcf92760-36ef-4f9f-9fef-3047157faaaf", "value": 34316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "67560c04-fc28-4562-abda-fd766e3a044a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d6ac900-3489-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775789893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "efbd3ffe-140d-470c-aa6f-037dbda9f429", "comment": "Malware payload (Gafgyt)", "value": "e4c3eecf1e6ea0ffde3c164ce0bcddf6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "a7f347a3-fd1f-4769-b86d-da18886c33ed", "comment": "Malware payload (Gafgyt)", "value": "68d597b438c92642937c89271fa135e09071029a9eddd636b3165e90639b40c2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "77b17ef9-bdff-4259-bcca-169994f84337", "value": "T1E762C09900AAFF00DC7C35F3046A3A65B6653F7C60A8899B3560274537CD5929BEFB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "ff107fe5-de42-4e8d-a09c-9a8f3cc7caee", "value": "384:eEze2dB2AeV5zmQ0drhSyrkh6vnaxAhD2p+Eoug/R:TdB2AuAdI8naxAl2Vg/R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775789893, "uuid": "b3e39ec8-3d3f-4ad6-8e54-0bc0278ffb19", "value": 14636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "59e72c5a-26a4-4f06-8f75-9ccdaabcedc0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d7075ad-3489-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775789893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "5c86c5c8-bc04-4c76-b05a-6cb4f18115eb", "comment": "Malware payload", "value": "a2211955d1640a3699cab71e4f45c3a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "31f27f73-ed48-43bc-873a-e4c6ed0dd0d5", "comment": "Malware payload", "value": "4e1e256c7192f461b741282d54776cc1b804a65cba3e3fac0bafce2e46b015a0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "f5dcb3dd-b572-4792-bb8b-32bbe5956cc5", "value": "T1EFE2F1D962DB4E19E7794BB3884F86E1CC97146147E4372E0CE982211324D99E3F9E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "80170251-0c1f-437c-9041-e6dccbaf97f6", "value": "768:rWaXzCcV8r+ruLPCjhy5AGGg+KCsTDQC0IXxDWTJyn1DAbDZYusem:tXN8q2P7OKfTDZLXNWs1WqTem", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775789893, "uuid": "a93605a5-f3ac-4a9d-8545-770a546e5fff", "value": 32272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "a2622e64-0c1e-4577-8134-1757f98b125b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d71890f-3489-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775789893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "cd8caf55-0b0b-484a-91df-fcada7363c02", "comment": "Malware payload (Mirai)", "value": "d9e4125017d28d04e7374ced6e424076", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "1c5e4cb9-8768-4d62-b5d4-529e0223e1f5", "comment": "Malware payload (Mirai)", "value": "cf5912a34ac1af0e412b28315287fc995019c153ebeb9b618b04ad7836b7e29b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "3f54944d-1b3c-42c4-a3ed-e2815dd0ee6d", "value": "T17ED2D074C2D27EA5DF52AD622DD0A2D09BFA0F253B6288A022C48F2172032167DF7D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "60e6d136-9d6d-472b-81e7-06128619e52f", "value": "768:p13qvMxD0bYl9S87nKJVG2WWr0ZRtQ4uVcqgw09H:TbKCU0S4u+qgw09H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775789893, "uuid": "62b91a73-0682-4b01-9694-1d8ef4782fc5", "value": 29860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "b74f529f-d82e-4e83-be5a-bd05edeb9cb3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d7693ac-3489-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775789893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "022d1151-7227-474e-8985-272c38880560", "comment": "Malware payload (Mirai)", "value": "31e2854b483fc0213d1fb39fc80652b6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "31e843c1-0c0a-464f-a467-461696cd8431", "comment": "Malware payload (Mirai)", "value": "8accc804c3cb20a869cba5bbf194fbc9ed7ae12b5d067531b1dda74685ddac97", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "02d5930b-5ca2-497e-ab61-d62bd9a508b9", "value": "T127F2F120EA960599D7746E76EEEC86CD851E473CECBE21712146686DA9F03043FF38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "28d7c66e-a087-4315-8a9c-d817a9987a74", "value": "768:TXp8M+iXQaynkvVqmrEWeCQbrg1Eo49fvh1cjCH/VK+Il2k6bw35u9q3UELi:iM1XQaykvV9r7ea94h5ztK+IlN6mLi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775789893, "uuid": "53d3820e-8bb8-4f1c-a040-3de61da386ac", "value": 35504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "51c0f962-4909-4d54-9820-7dcac9925c74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d77070f-3489-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775789893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "f6913862-c6e8-4ea4-b61c-9a19480dcb03", "comment": "Malware payload (Mirai)", "value": "e5adb6798d28bed8b29f5a36894e0862", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "0b35ac2e-674d-4aed-9dd6-d88394932bd2", "comment": "Malware payload (Mirai)", "value": "fdaa361e18f2c0f7df81fe239d713672edc8f27166378431db183461001eb178", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "ace0b888-4a45-4df5-bc47-aae9dcae2d60", "value": "T1476309D7F800E9B6F80DD73B4853450AB230F3A20A821A767357356BED7A1991877F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "7283aa2f-24d8-40c2-b4b4-76570c351f05", "value": "1536:tUcb8F+vAKGfyqF5URSw949I+Cp25WnrLU1ziZJgrW:6cjAffyqF5UTyK+G25AVUrW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775789893, "uuid": "06d12f4b-88cb-412f-bafd-a42faec8adf4", "value": 69800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "d6a7131a-fe76-47ad-8ba7-dd7e427e2da8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d78e900-3489-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775789893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "73dcfe48-7599-4375-afa0-388d603a319a", "comment": "Malware payload (Mirai)", "value": "02f17c34777152c35eaa1eb37056f207", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "f99c65e0-df4e-4942-a845-f9be2c68df0b", "comment": "Malware payload (Mirai)", "value": "16d646cca466381c0719bb5d7b1669ef1efb9fb467a4fc46443edfc02f67111f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "035a2719-f615-47d4-aaa5-8c88071b6c8a", "value": "T1ABD2E1722DC74D50CBD43C7792B9CA87227B81B448F73A913648BB6973E0C27343A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "38e57547-7791-48bc-b6f1-ee6ee170a172", "value": "768:sbmsbfOpqdofxrwb2o4kSIhhTWJaedAPs3UozK:sbmsbfndo5r+SIAaedACzK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775789893, "uuid": "e907a136-3cd9-43de-9c8e-6f26c04fffd0", "value": 30864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "495f922b-33a3-40d6-89e9-afa3bf4e47f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d79dfdf-3489-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775789893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "d54024c8-1641-4b08-bd3e-1c1b71110e81", "comment": "Malware payload (Mirai)", "value": "d694e1cc11c903409af9d776d0165f76", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "0083a51f-a922-4ce8-b154-759813dfedcc", "comment": "Malware payload (Mirai)", "value": "867162eae09940f554a7f657c34ce969a5477e81229f43b94ae4a5dbeaace38e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "83750ada-93ae-4b54-8c4e-b2fa9c93d11d", "value": "T103E2D07D17596866DE1A80F66FB243641FBB09619993CD880642E7C3DDE8E8A3C43E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "f63572fa-c59f-4a5d-84f0-4a5ea7d5ee82", "value": "768:I7kI6VDzaRmUEFXYLr6I+uPQvxNV1E6jiHp2/BMOjNnGJgGlzDpbuR1Jw:m608XYL+BuPQPVyyg2BM6wVJu+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775789893, "uuid": "3b08f612-b408-48d5-a27b-3bf5cac82889", "value": 32840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "81008de0-fc13-4a42-a37c-1f6d7f2296ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d7ab773-3489-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775789893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "d2718c6a-a033-41c3-9723-3cc89fe815ad", "comment": "Malware payload (Mirai)", "value": "5d1b30f49ae7781904e180557a4e2b6f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "924806b3-0bc6-4f47-b9b7-ef4efebcd57f", "comment": "Malware payload (Mirai)", "value": "bbc8baf2ffde2eed4bcb34e486b7f073166326a512b6398a381ac7e9b97b88c7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "291c7c4a-94c7-4758-8adb-0d2370a6eb3c", "value": "T1BED2E031F4E7D970EF5EE9B12C44D7C53B338E9B39A58AF11119D341A613C215B89E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "8c105978-ccba-4f14-9a1f-bbd96aa0c9f9", "value": "768:kbVp4KREhDP/i1iduQgxRXlQ+zQ7vFOLkcQdu4uVcqgw09X:AVSYEhDXLcXXns7dOLkHU4u+qgw09X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775789893, "uuid": "f347cb54-337f-41ca-b30a-1cc8570b75be", "value": 29980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "6034f94d-528e-4fc2-9b7a-d5e9fb61950b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d7de6db-3489-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775789893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "9f449937-adc3-4c5e-8dac-a2990f77eff3", "comment": "Malware payload (Mirai)", "value": "9759454edde8e7a25013e1026e46a942", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "09ba990b-76f1-4ddd-b3f0-956c4f0dd679", "comment": "Malware payload (Mirai)", "value": "2c77f6248d3ca2633fa7e816c399c084e0afcaa9e9b8f5954d03f0e0e75335c6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "26f33d1a-3450-41ff-9c12-7cf6fb1b2c3a", "value": "T1B3D2F1749C07C5ABFF0C93FB409F8F246D3105968E3AFD69E6550A6D04D16CA4A378", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "b93f9dfd-ddb2-4e15-916a-07e97a81332d", "value": "768:+HZKPDHh7cyoctCjprX5b7h7uF7xGSD+79:dHhYtcIdrXd7Yzm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775789893, "uuid": "2318fa65-706d-4db7-ae2f-c42b660fdf0b", "value": 28804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "b860e577-6d2a-4d3e-b40d-af64036a863b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d7eb8f2-3489-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775789893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "b67cc46c-f05f-463d-9eed-15c5537ebbf1", "comment": "Malware payload (Mirai)", "value": "601fa8d766c16b760bef0fc92d3f6fd5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "f8502d95-e73e-4e3d-b810-55cc2c16a3a0", "comment": "Malware payload (Mirai)", "value": "4ad07b48ed7d396e0cb35fbcbbfe05dcef34781b86435c0c30736ced67ebe341", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "0398a4d5-a382-4bc2-976c-3265568a472e", "value": "T1E9B2E0E3E6D0400BE24253BF977D8FAA4981643027FDD510F20132D366B71229BF8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "b464378a-f0ab-4026-b445-94b91cd68e93", "value": "768:kybNT9fJ9LWqOQ4Otlop5Fhp+cQHL/1UD:vN53EqlghENrNU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775789893, "uuid": "83b1edf2-a952-4c1f-8adf-8f3d1fd03615", "value": 24816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "5af1a086-5fc6-416d-969b-55dd18f66c39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d82d096-3489-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775789893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "f18b704a-2dac-4bcc-8f70-b67590b69ad8", "comment": "Malware payload (Mirai)", "value": "bd4a9baf3aba356ea720de84a541f7e8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "2eb90c8e-21ae-42b2-8761-52e5282a4fd0", "comment": "Malware payload (Mirai)", "value": "d4c4d3f6bf8ecc215dc3863b89a3f9b9323026ef341786667f36790bdd5db22d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "d143f0c8-00f4-4589-a3ed-3fac309f12d8", "value": "T14AD2F135900FDD79D365E2B5110B8E17B860477B6B25E9AA17488BE1CCD83CC62FAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "248c48ce-a1fd-47ac-a784-2d293e234231", "value": "768:4WNKcSspdGBfsUITb/iBlSaRP9V8BtpQLWGJsgkawDyVzzt:4WNrd7qFv07QLzq+w4zt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775789893, "uuid": "b16fb68a-177b-47ec-8fb7-e0ff7e9fd5d9", "value": 28604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "73ef3868-a2fd-40e1-9a95-7d628ed2f551", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d8329e9-3489-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775789893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "c3cb700a-1fa0-4d47-925b-3fae3dbdac20", "comment": "Malware payload (Mirai)", "value": "882a69dbba8859e2365ff6b02bbd325e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "b0ace52f-558f-4e41-9bfa-f1bc1c203776", "comment": "Malware payload (Mirai)", "value": "7b6510c31bc3b9f7ba3fba0e2560688eb2a90b9df939c2f6c0d5b5763369ac94", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "024a0475-7a61-4736-8c4e-3f542be231cf", "value": "T1EF236B63D9355E18C159D9F0B0318F755B63A4A5C1870FEE2062C27994A3D9CFE1A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "c6101f49-3a7c-46e2-8715-4a931abcd588", "value": "768:aFj/vVvbADc+oDJJMZbDKpQ9VaQUfOtXOBwCZ9f/l5FCoyI:wvJLDklKpQ94QUyOBrXCoy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775789893, "uuid": "a4f4160d-16c0-4a52-b9cb-7ff786488422", "value": 48076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789893, "uuid": "f4e14633-cfa3-4953-a5ff-568b564ec8db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4349de3f-3489-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775789956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789956, "uuid": "6ed89d17-4650-4c51-bb88-948f5bedfd76", "comment": "Malware payload (Mirai)", "value": "0cad92bcd35f95464a0909cc90980960", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789956, "uuid": "d6161e8b-2286-407d-81df-3858403df865", "comment": "Malware payload (Mirai)", "value": "799425a1da05773c7a5db4d28b5fdca4116680b13649cbd293a196061fd10287", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789956, "uuid": "1d81b49d-4352-4684-a2d8-35286afed4fb", "value": "T1ACD2E0008EDE7C2256308E37ED7882C29A7D05B870FF31C6166840F5BB5003E97BAA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789956, "uuid": "99b37b18-5ced-480a-8db0-56c0bb233bc1", "value": "768:A9mUccx0fFxFY59/0HG7hi8KC6OPGs3Uoz4:A9m6xiDFY1cN1OPrz4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775789956, "uuid": "39620fa0-1c8e-4d67-abee-94e57bc27c10", "value": 29424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789956, "uuid": "e1f69237-6dc3-4d6f-b8e1-763e9772139d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd54a753-348e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775792416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775792416, "uuid": "7f9d679e-b3dc-4268-a7ef-0dc3418e0e15", "comment": "Malware payload (Mirai)", "value": "e9c3e1540a3cd6ab19769b4f322f326d", "object_relation": "md5", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775792416, "uuid": "21a6201e-2234-49b1-91ac-29a5f6f8fffb", "comment": "Malware payload (Mirai)", "value": "36c75c26cff6f4bb850d7ce90ce7d0bacf9b8fdb057f8c5b14a1ea9df67ada98", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775792416, "uuid": "736b4d73-f0ec-48d9-b07e-6efdc6038754", "value": "T1853317C4E903D9FDDC5619712137EB328772F13B1029EA87E7ACAA23AC46B41D4472", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775792416, "uuid": "a309ac08-95e4-44d3-83cb-128d96b6b3d7", "value": "1536:O13kynNjv6czSEZeLmI37KNCgoTctoQzWxS2RAfah5cQ:AUyntv6cuEZ437KAgowtoeiSi1D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775792416, "uuid": "3df3cc69-5875-4c87-ba06-aeefba02c6c0", "value": 54864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775792416, "uuid": "2ec562f4-b588-41a6-890a-f4298b4c1489", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca442508-3490-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775793189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775793189, "uuid": "437f59ae-71c9-4a18-8845-605ccc40b804", "comment": "Malware payload", "value": "31516b970b1961164e72502564fbc660", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775793189, "uuid": "73d44092-344e-4714-8798-170afa4b3587", "comment": "Malware payload", "value": "28daeea16128e173a561ab6bcb2eea5ae4fb6f68d516cfdc699b4a3ba804690f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775793189, "uuid": "676265f1-ef7a-4fe1-8480-88580ff4b753", "value": "T1BF931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775793189, "uuid": "491cc19f-5679-438e-b208-676b481cadbd", "value": "1536:0Byp1tF/uwMmAIa14oXx+IMepeV7tb73WdxCrCitkb5fv2v05xsprCK+1sPyKrce:08jIL0GitkbFv2v05xspro1sPyvt3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775793189, "uuid": "e6428448-7437-495d-bc4c-ddc6369d8948", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775793189, "uuid": "70c2184d-d9e7-4871-8fe2-95f7f1856a42", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c94b9891-3494-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775794906, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775794906, "uuid": "ef2a602e-87fe-421e-bb80-74f17bb1ce5a", "comment": "Malware payload", "value": "8e7d4686acc9d1efeb904cec7740f954", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775794906, "uuid": "a286c032-7ccd-444a-aa54-c717caded1a1", "comment": "Malware payload", "value": "7f94069e597b2657a1a839a9509ec405371347d1674f0227e7561ca4685abdae", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775794906, "uuid": "b81fce16-eb1f-4705-af84-9198f8196c41", "value": "T1AB55232172A0CAB7C437613140EACB791E6A74B25B3882D777DC27DE5D113E19B292", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775794906, "uuid": "4b8159aa-9a15-4843-8ba2-e6e181227167", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775794906, "uuid": "a5991a9d-1b1d-4012-a75a-6c6e2ccb91a6", "value": "24576:qk70TrcKpQBDVkfTpvhWVEJXym8WNr/bs32lNDPm9/JrZjEAtYdG1eoY0:qkQTAKTTqVEJXp3NLbsYFo/JFEAedNoH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775794906, "uuid": "5dbb73ab-81ba-4a6c-b87b-73214aceb605", "value": 1298432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775794906, "uuid": "4947011c-7313-4ad7-96ba-7f1b3e105edc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c670d3c9-3499-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775797048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775797048, "uuid": "c1eabf38-e228-4925-a8f1-356fedae0ab8", "comment": "Malware payload", "value": "25fda4bd51d0adc2945e52f8b69cf1b0", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775797048, "uuid": "b1c5a3bb-790e-4c8f-a3d0-904d5405f3fe", "comment": "Malware payload", "value": "8e3bc6793e5570383a98db5f7c32eff7e84b8fe7be29e7305a64b9197df7601c", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775797048, "uuid": "f78ce47e-8289-401e-b895-c307556e6f30", "value": "T173B63331BD8C967AD85950328081CB710F8925300B69D8DBFDFB36A35E1A9F8B6771", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775797048, "uuid": "2701b993-1e95-40f8-b18e-eeb68e95c55e", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775797048, "uuid": "ab5e57cd-a788-4a8d-9cfc-1a7659926050", "value": "196608:NypVqkVABAkbD0OlCBV6IfUoOjLXOE9ADLcKNk7mkT0xI5u5ZC7tDw:yV/hY1y6YHIe8kLZaPT0xp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775797048, "uuid": "11c18dca-a4bb-4138-b9ad-31296726e2d4", "value": 11417088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775797048, "uuid": "a5eb1173-5af6-45e6-99b0-6e83e16d7fe4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1606c58-3499-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775797067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775797067, "uuid": "3f478fa0-2a51-4e4a-ba79-dc87fca90213", "comment": "Malware payload", "value": "3ecd0cccab2f7c166604125c4e95b61f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775797067, "uuid": "6a378e37-4a7b-44ff-a69f-90a10c789d55", "comment": "Malware payload", "value": "1b2165f56a16be0e408e5c25d71ba9c2bc5280df212f6fb76ecfbe476e0cd460", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775797067, "uuid": "d6f2ce0a-6d9f-4c70-ac56-a0340ecad49b", "value": "T18593E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA523895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775797067, "uuid": "e5539371-ef7f-4c7c-8207-176a384f5fd3", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXoIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775797067, "uuid": "1970f200-e1d5-452e-9303-04e7846b6a5d", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775797067, "uuid": "6eb108de-5c7f-4033-900e-c7235cd85568", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1c92aaa-3499-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775797067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775797067, "uuid": "e7a259a8-9926-4836-b2fc-76d5e0401afa", "comment": "Malware payload", "value": "4fdcde464012fae519d7ae03e26f7754", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RedNet", "colour": "#c2b512", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775797067, "uuid": "b34485d1-705f-480e-81d3-dd9c367706bc", "comment": "Malware payload", "value": "989e3e1e4e06e9efebcde8e5f353979da7dbb9e524f93257c07c19f4b46455e5", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RedNet", "colour": "#c2b512", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775797067, "uuid": "9b0c3632-0035-43e8-81fd-0944c0b13287", "value": "T1648633239184C0B6D0DD5570CCA9C22BCB3A9831137899C6B6FE4BE76D3434257B7A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775797067, "uuid": "025879c7-096d-4baf-9bc2-3d2ea182425d", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775797067, "uuid": "24bfd999-4031-4813-aa0e-6d74ef0fcc00", "value": "196608:xqUCTDpvF8h1T4Fqjvu8Q9TCdSVaytGlm7csN6Q0IGoF3yp:jCDfA4Fq7u8Q4K+m7cU6Q0IGZp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775797067, "uuid": "f4bd7b4d-edbc-4146-80ab-6bd2bb9f1c4d", "value": 8614400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775797067, "uuid": "d1ca2a3d-9fbc-4731-9158-2473af205a62", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbd20a84-349d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775798749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775798749, "uuid": "25b22919-6c0e-44da-8b16-9d9b5b52e482", "comment": "Malware payload", "value": "2c047ac7005a6be534c0a8ac9e54d156", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775798749, "uuid": "92f0a7fa-e9cd-4918-8ed4-2462fe6a3201", "comment": "Malware payload", "value": "0db04765126109b056ad3457fb9ca74b490617278cb1534c6332a250c9a6f385", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775798749, "uuid": "edf40831-df07-49e9-9c2e-6b3a70c3c4ab", "value": "T1F0F0A74FB486F03AC04029E89765F76AAC707C6B6663CE5C78407A50FFC653478622", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775798749, "uuid": "85157fbb-d376-46e7-90c3-600c09b38a9f", "value": "6:hLgjJ5Ja/+YcLN7+Y3JMF/+Ye0IdyJ4gHXLoO4H+v+YdF/vNnQz2JMIykwF/iYOp:lSjkOLZpqjWWHbozpqF82Q/NiT+XHQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775798749, "uuid": "fa991993-35d1-4fb1-a8f4-8e464ac6fe4b", "value": 494, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775798749, "uuid": "8eea1252-c44e-493c-abc8-c07a08f1d25b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a70b59ed-34b0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775806874, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775806874, "uuid": "308987e9-7d08-4882-bfc4-649dfa724d7c", "comment": "Malware payload", "value": "307ca352bbceac0cdf9db70ee26c2f09", "object_relation": "md5", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775806874, "uuid": "23adac35-9e2b-4e07-8867-360575ca2001", "comment": "Malware payload", "value": "a90dca8b01ce7e70b9b1481a3ebe2eeebeab545983968f3fca8b9d9cef6d350d", "object_relation": "sha256", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775806874, "uuid": "5ddc0700-51f8-4865-aa0d-6917be9b707b", "value": "T1333412619281097FC01BC2B98E5BD43AF773B09D619A7B0719DAFE712E04D692B4EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775806874, "uuid": "e45dbcf9-4eb3-4134-8141-2a64dc27a370", "value": "6144:GFpAaoW+x7HPRj59NxyxF0ZObCMl8/69w4TdzSREhWqUful6oGQw:w+xVCHEOxlY69FxSRhvC6oGt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775806874, "uuid": "3108e806-c6ce-474d-9cc3-b3f7c120dd5c", "value": 238109, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775806874, "uuid": "a8e27b62-0c12-481a-8a58-1264aad27a7f", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed10ecee-34b2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775807851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775807851, "uuid": "70240396-b87c-4ad2-97aa-19eec87cab7e", "comment": "Malware payload", "value": "2acd83fc5f0538d785628b65a6f01031", "object_relation": "md5", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775807851, "uuid": "dae7a0a0-0d07-486d-b84a-f589747b0321", "comment": "Malware payload", "value": "d0786911c4e713976113d1007902ed58860a2111d614a95cef7504ae35b20beb", "object_relation": "sha256", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775807851, "uuid": "a94f3620-10fe-472a-bd8c-3bf2f0e9bda6", "value": "T1915533306205E2CFDAB4ECFE8EB673F5A732F4D96701266E40161C6CFB9651261E34", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775807851, "uuid": "3d04437f-2159-481a-9806-cb22817b6b42", "value": "24576:MnKB4VGbAXlE/GtVeeZ51+ENlGQnQ1yajSUllEuoyUif2mV1LQc:oVGbAXH/btyzmUllEuoq+mXEc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775807851, "uuid": "d060e5c7-0558-4c71-862f-9f30506aa69e", "value": 1369147, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775807851, "uuid": "9daf53ac-2fc6-44ef-b854-f0647197545c", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed26b52b-34ba-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775811287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775811287, "uuid": "182bd8b4-6c3d-437b-aafc-bf773ed5c864", "comment": "Malware payload", "value": "f50638480178ba7863b2d4657a6b427e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775811287, "uuid": "93af52f2-dac9-4080-84d2-8f525a864b32", "comment": "Malware payload", "value": "6a75e1ce4ba66fb02f6188d10b6b1b92f71677c901fbd73b9c42bb7d318f8360", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775811287, "uuid": "d5c6141b-ea8d-40de-81e4-ccf1c7c9d9fc", "value": "T1FE34E0D351C990DA22583AA70385F5E6DA24EA83C4D7E867EC41CECC985DC2F1DE5C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775811287, "uuid": "7416c8b3-fda1-47f6-8bd3-ccc9631dcafe", "value": "6144:V0Q2x6giTYL2awF9VqLid0JhoGr21z2ElLlf1Rha85ra:Gj6nPd44zn1RbW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775811287, "uuid": "f568ba85-9944-46f0-83a5-a4788a7521be", "value": 247898, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775811287, "uuid": "b2028c1e-f704-4005-ae91-87aa70469b54", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1af2b5b-34bc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775812153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775812153, "uuid": "72fc66b7-225c-4728-9329-e2b21a2edbbd", "comment": "Malware payload", "value": "86878bff58fe7e3e18c8942b1cf14a28", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775812153, "uuid": "d6abf6cf-b482-4301-a58d-d20b0d885d84", "comment": "Malware payload", "value": "1e12d16890bc37e88fb7f34573cc94381007ef93d255eb8a1ae9e2624b331822", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775812153, "uuid": "eef87fd5-860a-4562-9106-bd29a7053928", "value": "T1CD0403B3330046BB6DB5C96B7B1658DD407EBF5003B020F2E64B6C9AD4B4753C2A96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775812153, "uuid": "36cd76e4-e97a-4a91-9fc1-5761624f6bfa", "value": "1536:JcFs1y/eWgDwQrR2SJwRUQukgTkwSuDEyAnUAz9Ucf0j9RV9q4pxG+J85RqwmY:Jc4meWgsQT2RgAwydUApJf0jDV9bcMY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775812153, "uuid": "b03d069b-3406-4dee-96c3-91a35dfe9493", "value": 175018, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775812153, "uuid": "96380127-4b8f-496b-8983-fe35767261ab", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec00cd17-34c4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775815580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775815580, "uuid": "e8a36f52-4462-40f7-bb43-77aab23f3363", "comment": "Malware payload", "value": "dcb4a0ebfc868f3a1e3f98f06da4663f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775815580, "uuid": "d50e2a60-3679-4998-988e-c575d94d1660", "comment": "Malware payload", "value": "eeed1163df0d752f938f66767aeb1664d43f9229d144858773bf8232e7e501aa", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775815580, "uuid": "0db73d80-b77e-46b2-819f-e6a768766f9c", "value": "T103973381475C31B5F3369E0BCE4AAD2F2CC0C1983CD86B863A717E16E77CA2855DA5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775815580, "uuid": "b5750051-3d25-4f91-89aa-e104894ccfdc", "value": "786432:ITaZHvlJTz9jsRybHIGkB1VNHtuFhRpy9oFdfh+1VPgJn4IM60:IeZHvlVhhHI1/Vptuh292L+1Zg6IC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775815580, "uuid": "ea8b170a-93fd-4f85-b60b-5b5e9f948560", "value": 41380003, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775815580, "uuid": "2e275bea-ca22-4b94-aff2-c50b8374815f", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7d3c659-34c9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775817613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "c39d4fc3-2c5c-45a8-ae97-69244390cbf2", "comment": "Malware payload (Mirai)", "value": "3f69acdabe1b8f1e0142b9ce3c288c1a", "object_relation": "md5", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "b610e3c8-aee5-4591-adc7-4f015dcca401", "comment": "Malware payload (Mirai)", "value": "8ef72a2df2a4d8a90e1bf300586b26057f1adf4baa367def2e9ed53d391cad8d", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "c2feea69-29c4-41a0-af42-1ed30f22cd04", "value": "T1F443C552B8815A2BC1E423BBEA6E518D3371B3F8D1DB3616CC111B2477C952F1EA7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "962cf43f-0e48-44ce-869a-00ee2f9f9d67", "value": "1536:rL/BMZOlXxfoYfi0p25+DfaerBkeSNld2lG9WkQxud42+:pMZ2mFkfae+eS/dyG9/Qw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775817613, "uuid": "e2bfdfe3-3cfa-4b09-b883-3867b2018135", "value": 55608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "95b69fa1-c19f-40c2-b1a0-8f036ae11efc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7d6574a-34c9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775817613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "eb824f38-7973-4b6a-8fa6-cb712985e375", "comment": "Malware payload (Mirai)", "value": "bafc345f79740db8a32e89694653e7e7", "object_relation": "md5", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "9328bbfd-78c3-424b-b4e4-edaa16d0e4ce", "comment": "Malware payload (Mirai)", "value": "8c4bc1a1a43aed0f5de430760b5ceee191b643af915ab499fe3d8ca1064e7e78", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "aac1e810-2482-446b-9cdd-aec0df894ef4", "value": "T14853E64178819A17C5E422BBFA6E018D373563F8D1DF3216CD226F6476C982F0DA7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "c76e67a9-761f-4ed9-a684-ee8ab091c275", "value": "1536:1PdIMPcUTCRfRpbY20ybvLzi+lG9Wcq8tJtZVd42+:1PP14AeziKG9bqsJtZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775817613, "uuid": "964377d2-2f05-4e10-9358-d336125c8e28", "value": 64456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "d88c9478-21bc-4d13-83c6-05d3b0898540", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7dbe5e1-34c9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775817613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "6f6c2003-2e41-4718-a168-3813127b4471", "comment": "Malware payload (Mirai)", "value": "5f731822edaab2fd09929c41a268f817", "object_relation": "md5", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "b971846a-26ba-471b-bd61-0e9b33b55a56", "comment": "Malware payload (Mirai)", "value": "864a182355f9898ea07ac0d30df88e3caf93c2ca29cc5880a6445878524c72d7", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "c01e3560-3ca7-42f3-a358-1a3a6aa5d6ac", "value": "T150438F36C47FADA8C5858238A4214A741F53F50882A7AFFA9BC187655047FFCF6483", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "4fe13031-06a6-4dd8-86bd-d2ecbc4ca75a", "value": "1536:L7dIsToytwtd1UGGX4WYN9F53Y7ImV1Ckod42+:L71Toytc3ZN5Y7ImV1G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775817613, "uuid": "ac1e51ee-1a46-470c-84dc-00cd403ff2eb", "value": 55208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "24703b6a-2bad-4f9c-9407-db7f7e191396", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7dd6545-34c9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775817613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "01aadbe9-5051-45e1-9eae-d27ad6ff8c63", "comment": "Malware payload (Mirai)", "value": "576165cc623f5c1cc6b30d400957e0a2", "object_relation": "md5", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "7c17535b-c45b-434f-8765-b8b0da52de7f", "comment": "Malware payload (Mirai)", "value": "1bd060779bcb794a5bb8c551742660923659b3aee42972fb4b0670bf433cf3c9", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "ec105bfe-8867-4aaf-9521-151e0e3b50e6", "value": "T1E8534D96B401AD3CFC5BEABD40165A19FA313B3016A30F5B9BA7FC839C321A6DD16D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "69b2e725-ce31-4b96-9185-8b7c75ade87f", "value": "768:neT+6JhUvtNaEVG1XPgj2x9+iGCvYN1ul8yXLyCIlqXxXv2XWFtN:nInQvtNFG1XIjeWvNUl8yXx2qBvy0N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775817613, "uuid": "be80b137-af7f-4841-8640-0efa87381217", "value": 61432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "f383ab0f-3007-43f8-b3a7-213cf1e4300e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7e0c7de-34c9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775817613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "211a5507-d969-42d6-b9b8-bea229fda0a3", "comment": "Malware payload (Mirai)", "value": "300146e7f05640519a709ddd0382dd3f", "object_relation": "md5", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "c3061cd2-04ae-4c8d-b51e-72a41dd62d9b", "comment": "Malware payload (Mirai)", "value": "add376942b58b176f0346ece4ad104d942cac2e92429f49c2c5d56f64935a0d1", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "43af5613-9675-461a-b08a-f5d166c717a9", "value": "T12D535921797A2F17C4E9A07A25B38315B6B5768E32B8C65D3C732F4EFF14640A0075", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "37e74f67-c529-4c71-8575-4495e8d00a71", "value": "1536:k+YY8/acYmgBOwicSYmnWLI1fz/A0Lzp1pdYm+K:n2DZYmnFxoYp1r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775817613, "uuid": "90d45f35-d224-4dd4-939e-0a1a206ef8f6", "value": 64400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "a9f166a6-16cd-4ea5-9405-01d4cb095187", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7e5be3b-34c9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775817613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "d20ee088-b5a6-41d9-a522-388fe721cb39", "comment": "Malware payload (Mirai)", "value": "b9df9a278e8be6edeb1643630291bb67", "object_relation": "md5", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "c734ca01-aced-41c8-a44d-0b946732f471", "comment": "Malware payload (Mirai)", "value": "8606bf2c5b1c46df441d3de4d23d4f2dd5832e621f1c3312102cfbd3026ca4be", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "ff81e80c-9f15-4d3d-8270-e3bfb332412c", "value": "T17FD34B46FA418A13C4D513B6FAAF4149333297A4D3DB730699186FB43FC6B6E0E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "48cfb2ff-7125-4813-8ff3-b535a1254a5c", "value": "3072:fVOaoBmxuVJgyrOP/oxpyaEHDokBzXTPV+84/M/9vDVdYj:f0aoBwuVJgyrO4xpyaEHcs1+8MM/97Yj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775817613, "uuid": "daa9a4de-84ed-45b9-9ea5-f562b9aa58b4", "value": 136482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "5006a328-b55b-4024-8098-99b1fc65bcc0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7f46e13-34c9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775817613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "d77d6d33-796e-49df-a16a-8b8db6a0e2ca", "comment": "Malware payload (Mirai)", "value": "fe8fc383b26481d8e276a64c5dbcded8", "object_relation": "md5", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "f2fc1838-a3e4-4874-8558-dddb66640234", "comment": "Malware payload (Mirai)", "value": "0f1c3c7adc23ad914d8f360681a6b207a5236d5d560ac5d34b5a3bf5d4f71dd0", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "f82c510b-6888-43bb-818c-188e2c36d105", "value": "T142839416BF601FF7EC9ACC338AA9170528DC651E31A93B75B930D428B25B25F15E39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "86161f65-f593-4ac2-a5a6-9cab8e3479af", "value": "1536:bw4pjQLOQ8ZHYxdGAopJpPok9Z5zty7d42+9:bw4pjWeFYxdk9w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775817613, "uuid": "251cf5d0-7a0d-4523-a650-a97bcac0149e", "value": 84172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "8ca64dac-4329-473b-8dd5-21bf3c1b63ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7fb936a-34c9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775817613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "9e45a069-5626-4cd6-8d7a-f4f39edb9579", "comment": "Malware payload (Mirai)", "value": "9fc84da414c57f654f7529d34873960d", "object_relation": "md5", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "8354f4fe-133c-422a-b5f8-7083ab715833", "comment": "Malware payload (Mirai)", "value": "8e7cb7fe8db99082ed0b5d5247ad35333d319a85e9879e0e35eac8d7b95d798d", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "d9c80fbc-1be7-41e3-90bf-e935805e4d17", "value": "T1AA434B03332C0E17D9A21EB0253F06E093BFF95126E5B68A254FDB664639E761182F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "4929feb4-6da7-4ebd-952b-2315836ce3cc", "value": "1536:Jt1JILhthQ+1r4atGKCjBTIdWtGqEd42+o/:Jufh/wDIdOGfr/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775817613, "uuid": "8ee6eed3-eaf4-4b0b-a33b-4f551b8f08ec", "value": 60040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "9781d49e-d164-41b2-b9bd-07acfdf908d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a80507f2-34c9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775817613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "0d4e57be-2121-44b2-a402-18b6243c10e8", "comment": "Malware payload (Mirai)", "value": "c53efa67bffdde47c0ae85ba4304eeda", "object_relation": "md5", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "7779f1a6-9d01-40f5-b3c7-b8bfa6e456f3", "comment": "Malware payload (Mirai)", "value": "d8d19ea3f4cb76c515333486298c6962ab980565f4f3d91f83193b3f42087058", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "27eb7be5-e1f6-4abb-ba5e-f942c936af64", "value": "T1F873A80A6E358F6CFB5D823697B78F219758339626A1C245D16CFE021F7024D341FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "8ce7d152-559d-42e6-8f49-17628530efac", "value": "1536:lo89L2T27mQaXcn6EyvXqaQSjIHOVVU+6Y3zbNZtyQEc8LMk7d42+P7w:lo+2TIaXIE6aZjIHIVU+6ybNZtyHc8LT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775817613, "uuid": "df7476c8-0f29-43eb-95de-95f184f862a9", "value": 80188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817613, "uuid": "d8ba25b9-4d0d-4b75-a264-4ad35ce75061", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc057763-34c9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775817674, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817674, "uuid": "dfd65edf-fb70-4a96-a310-de6c8654618e", "comment": "Malware payload (Mirai)", "value": "20e976315b881826f10e30c2e60a1328", "object_relation": "md5", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817674, "uuid": "834de9c2-a382-4474-8942-7587857d5f39", "comment": "Malware payload (Mirai)", "value": "85ec1f150f40867cc9a5f4ff0f5760fa0f467183918f6837ea606b3b29f9edbf", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817674, "uuid": "aa1f50f9-54a8-47bb-9de0-5c6ece1a4175", "value": "T12F731A46B8818A16C5D813FBFD2E018D332667F8E2DF7212DD105F6477CA92B0E67A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817674, "uuid": "74ad7566-37f3-4559-a9a1-c12043b2aed2", "value": "1536:ONn8UxkW50thqBtIC1R4/LsdH0ZBYcZvNNSVgfpnLMgiEy6uzGbd42+:AxkW0hCtIUOSqDjM8y6uzG5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775817674, "uuid": "25b3a627-80b2-4c80-a8af-d0757708c5f0", "value": 75056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817674, "uuid": "9c4f61c8-739e-456c-b1f0-8d9cd2f803db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ba51d1e-34cc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Adware.FlyStudio)", "timestamp": 1775818720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775818720, "uuid": "56e001e4-8966-4e75-8968-d2c4b417e542", "comment": "Malware payload (Adware.FlyStudio)", "value": "086dfc91363710a6461d114b2c6bd226", "object_relation": "md5", "Tag": [ { "name": "Adware.FlyStudio", "colour": "#fe6a19", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775818720, "uuid": "51624867-f629-4d11-8434-098e95c50fb9", "comment": "Malware payload (Adware.FlyStudio)", "value": "fb3158af26f5b5f67f3d486239a2ba15a959d0ed882784b0366482ec6baaad28", "object_relation": "sha256", "Tag": [ { "name": "Adware.FlyStudio", "colour": "#fe6a19", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775818720, "uuid": "8c103486-7b22-4d01-afcf-c8ad82985c78", "value": "T191E68D23F210E6F2D156147097B7A3B41A36B7301D27AA77EB908EF40FB17619E261", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775818720, "uuid": "fc113326-e538-42ae-87ef-e3a86d998403", "value": "fdba9d2510933502dd7bd33c4d3181f8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775818720, "uuid": "c5e2dd6e-3092-47d4-b51d-0a358e9b606e", "value": "196608:cITVMjAPAXPbe8GhcBOzzflQ2EpZdaul48DueJO475Q:cIqxzef6OflQ2EpZdaw/aOQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775818720, "uuid": "e7892793-1dab-4fdd-999b-45255af2abbd", "value": 14413824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775818720, "uuid": "556b7b86-c61e-43be-90d1-38c21d77bfec", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4775b604-34ce-11f1-bc00-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1775819599, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775819599, "uuid": "31db19c5-5e94-4b78-96f5-2233858a2cf5", "comment": "Malware payload (RustyStealer)", "value": "6b7eeb4e4eb23d7273fddb0c430a9c9d", "object_relation": "md5", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775819599, "uuid": "6d53be82-47ab-4fad-a5a1-b461fd44fac8", "comment": "Malware payload (RustyStealer)", "value": "147194874c74949be05a2d0831ba48b7de442ba01d0a65755cbb0a36df0cef18", "object_relation": "sha256", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775819599, "uuid": "06a8dca9-4e12-414e-b4d3-c9c0dd519d46", "value": "T1F7D501873DE5F4B7EA02C477EE0B63D0B4A23D869261F18410D773A96870A1C77673", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775819599, "uuid": "a5f0a3f5-4b7c-4321-ae80-ae2cca840f0c", "value": "49152:CFEPvNL6P264taeFFolZFQ/h/NO3Q7vqjmypy5fL1wXqSQFPbAgP:rNL6Oh6q5w38vqpy5eAFTAg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775819599, "uuid": "e97a3f72-f848-46d4-96ac-a7ffa6fa7c30", "value": 2777088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775819599, "uuid": "fccc3692-2e93-4951-bb74-9f2fa248e6a6", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95d9ce60-34d3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775821878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "45610a63-36b8-4365-b013-595ed813c7a8", "comment": "Malware payload (Mirai)", "value": "9026bb26ea49a7ddd1ab5218afb55361", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "a3da104a-11ca-4694-810d-df475697654c", "comment": "Malware payload (Mirai)", "value": "6b4fa5b84da132d9746f6af281f8ddafbedd04719b11a0d1269d6168cbe69be8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "e17b8b88-44c4-48ed-9be5-7f68594b617e", "value": "T143E2F26A51ECB12CE44E903BC32FA98E31E65D11BE17C69424C476DADF611F910B68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "050ff156-4b57-4564-8995-dd4a1d51c95a", "value": "768:g32bRAqg2UQzSPMjFY8AFOEPB6ZSq7xnwNQBUx:DbRAp2U4ECF+FvB6ZSonwN2K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775821878, "uuid": "0ddda052-92ea-4e2c-8a67-2d8b72fbffe8", "value": 33900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "e2fb7c50-a3d9-44cb-b30f-d7041d50b25c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95f358dc-34d3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775821878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "d75ee4b1-8da3-4bab-8ccd-012c83ed531f", "comment": "Malware payload (Mirai)", "value": "9299d5abe7f9931d09fd18d305b5d14f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "32e32206-2a52-4393-88e5-deb92b47bdc7", "comment": "Malware payload (Mirai)", "value": "faf66ec55dc5bbf41142f09ee4f50c967d937277388a3cfcb449a0a6ab9540b4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "72e8e705-5a5c-4d4e-a038-042c423b40e2", "value": "T1B603E1BECE5D65EBD4EFAEFAB16A030937097052319BC34D93444C19FE589AB31874", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "a70cf098-4670-48dc-b66e-20c7e931c8e9", "value": "768:cVyIwYjG0JFZa0TowHE8hPusdsgRIir3jwSj7LIg+M/WJ:cVyYjXJjaqowZm25RIirnj/InMc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775821878, "uuid": "21148a4c-c762-43f5-baba-d3d3ceb213f6", "value": 38096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "231d6947-282d-4aab-abc7-eda6d6c2c5ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95f41b91-34d3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775821878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "dd49719f-8258-423c-abe1-0862408f562b", "comment": "Malware payload (Mirai)", "value": "211d6c17339b1a95cc9d504996619d38", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "0b1260b2-2474-4eac-9a54-4fdc9454c29a", "comment": "Malware payload (Mirai)", "value": "c18ed7a234fe4f26d89fa2b80f1d7366b0374a6e9416df2115e8676bb9a5edcc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "d7d977dc-0adf-48eb-ade8-0db07114a5bc", "value": "T1BBF2F120F1183731DEF19D78E11649827673A720EAABF171990C5BA6859C2DF30BC4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "84b2ccbc-89df-406f-912f-8211ba034e34", "value": "768:/ZAb2jdTWDPtuRl/dzCvCD4LIsS1X9kUv9EFTx79Hmnoe3ehH8s3UozW2:/ZAKjBWDPtuTcvC8LIV99Vv9ER9Zmnep", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775821878, "uuid": "0d9b089f-1c85-43b9-848f-f71ad1834743", "value": 35556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "101010c0-fb67-48b5-9d6b-44ff01c0fc44", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95f5a4cf-34d3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775821878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "1053ffbc-cb12-4588-b620-2f6f7209489b", "comment": "Malware payload (Mirai)", "value": "1b0511ebe31f260c6052c18d8012d52f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "d696ac46-82fe-4ff4-bd24-09f69103d458", "comment": "Malware payload (Mirai)", "value": "a0f3b832e05339d9b5fcb091ed620bdf103b931093aa924d6c79b50f6b7d76dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "a68cf4a3-e0ab-461b-ac97-b8dd1350ba88", "value": "T15B832A97F400EDBDF80AD77B4453490AB270A3A105830F36A39BB963FD721A45967E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "f1dc0101-0b64-4108-abd0-ca3bd146c6b1", "value": "1536:quKG91e4DgWxYRyRqwwrzPQtav8FjWtFUo/V6OXZJ7/aNSOFmA7ExtX1dT:q5GTHxYRyRqwazPQta6Q9VXXz4FmA7ux", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775821878, "uuid": "7742a90f-a78e-4ff7-a91e-7d1804660e99", "value": 81652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "c79dcd3c-1af9-46a3-afc1-5ebf5a20211c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95f775ab-34d3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775821878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "616d5925-12fb-462e-8a5e-2f59db199da3", "comment": "Malware payload (Mirai)", "value": "2f5a17c5a8ed51606e8f585839487f25", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "b79d796d-5e50-4e70-aa1d-de752ec80dcb", "comment": "Malware payload (Mirai)", "value": "596a4370528e80a5ba2dd6997ff38327cfb256b762f64a04319b400a00fbbc4f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "81df5396-c81f-400d-a4fa-47cb3ded07bf", "value": "T120539C73C8296E54D19582B4B871CB781B63B48082471FFA5BD9C2BA9087DFCF6093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "983a71fb-edd5-40d5-86c4-a44341ccb2c2", "value": "1536:JaDwtqKcomlIFZCXaZMYfPkYP2gpK2mP5A/iabC0c/v38Bs/n8a:JwacomlITCXaZMYXkYOgQ2mgiabgXMla", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775821878, "uuid": "4c2d3c1b-9108-4275-84ef-f521be22a78e", "value": 64464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "422834c7-08f1-4df5-ba44-dce94752200b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95fc57c5-34d3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775821878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "5324e24c-7ef5-4bf7-adce-13c80e4a98d5", "comment": "Malware payload (Mirai)", "value": "e7364120e249b51201cd92f91abe52f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "8023d2fe-c104-47ee-baed-c1a0268fdd8c", "comment": "Malware payload (Mirai)", "value": "5733747394fbebde0a7b703e8567d19356516f184fba99dae5de9a655aa52be4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "f30297d0-b1be-4f30-aab9-20292f095101", "value": "T126E2F1309D082C20E670E9376F388BC362EB67F0E5B572D6292807A426E6D0D4EB55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "8985f444-d310-4213-8b1b-77ca25df01ca", "value": "768:heBsVPxhgoeW472XFJGScKAfcUnMO1zpITDjD6XBvs3Uoz1:heGVPxGoLVfncKAfcCMqRiz1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775821878, "uuid": "6b4168e0-26dd-4dab-9a70-ce11a8be6067", "value": 33864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "0b60a427-d7ba-4676-bc6e-bc85e1475d1d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9606b064-34d3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775821878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "74f00ae5-da84-4fc6-9e36-bcff85401648", "comment": "Malware payload (Mirai)", "value": "3133067c44e3fe5f70f62eb7c9bcc518", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "3e6bf052-1e81-4861-9b48-0631c4b2ac0f", "comment": "Malware payload (Mirai)", "value": "3143f1bb94262733cb91ca6d84a014fd29ffc0b1bf61bc8fd1e796e34f5b6588", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "bd42406e-7886-41e7-b47a-488fe37dfc49", "value": "T1FC4302AEA2076E93A71314B6D6745CF2B4934FF650C8F435AA5F02B857CD61B43348", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "9df1d46a-ba77-46eb-970e-a4682b6549c8", "value": "1536:6bwzH4WSgfh789A/lVl0iHKLuy6tlV1nLk:FUgpTvlQLd6tlHo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775821878, "uuid": "fc453bfa-8875-4303-8a64-ffdda3c60526", "value": 60128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "29686124-99b4-4e88-8d19-c31bb0528fc0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9608d0ef-34d3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775821878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "e970388b-8825-41cd-a6a8-ed263bfe5a09", "comment": "Malware payload (Mirai)", "value": "0795d465520b9fcf14055586bb4824cc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "b7b28b6b-f154-40ff-9dfb-5b46f78b79ed", "comment": "Malware payload (Mirai)", "value": "b356e9428b521645766bc4f940c07ef8edddef658e1890bf2ae284c49808a4d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "732a03a3-d7b8-48bd-89cc-5c1381752e5f", "value": "T183735C22B9751D2BC4D0A87A61F30321F2F2478A25ACCA1A7D720D8EBF6564032477", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "b10971b7-03a1-4294-840d-0aa5d368e4f4", "value": "1536:jP+SbCGR18pspTH1KDQ2tXXUN95s0xwlWptCMR8/pW:zf4yVUpENP1x6MoW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775821878, "uuid": "13dab1f5-52da-49d4-8c68-5c6264ef4086", "value": 78528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "40f05aa4-17b7-4db3-a621-4e1de554264e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "960c339b-34d3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775821878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "56758d5f-dbef-433a-ad5c-8c0711bc4edd", "comment": "Malware payload (Mirai)", "value": "c5d1116b5cf0df5ed26ce92faa7e064b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "7bf159c7-4ec9-473f-8bbd-b42415a09062", "comment": "Malware payload (Mirai)", "value": "a0a1cb987c89fd4b1fa9faaab8c7641511ca98341778a71b76b40d19065328fe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "c2e270ce-edde-47f1-a877-be0653d42fa8", "value": "T19803F13516212116CAB03C37EA3582833E5F53FC00FB31632BBDDD591286465EEA88", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "eb317d8d-32c5-41bc-ba69-d1966ed2ddf6", "value": "768:OhbUpgfK/AwETDSmD7GKdNcBfpxycgETZ6H9bDC5u8Lf9q3UEL+E:OxUpgy4JHSjuNgKcgETQ90kLZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775821878, "uuid": "a8ad98b8-99a6-42e4-9a5d-9f7406d8ad18", "value": 38016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821878, "uuid": "7136af6b-a7c1-47e2-a772-eb54ec7fe47e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "172f24ea-34e2-11f1-bc00-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1775828108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775828108, "uuid": "7af4b093-ad06-4516-8bfb-e421044c579d", "comment": "Malware payload (RedLineStealer)", "value": "42d4d03e34133e506fc34374b5dd17b7", "object_relation": "md5", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775828108, "uuid": "9c0e1a1c-41ad-4a4a-9617-ac64c59f443f", "comment": "Malware payload (RedLineStealer)", "value": "f2f1ce463633713f8bdd95ac80b55a04ef28da729b768f622aea00fbc45bef0c", "object_relation": "sha256", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775828108, "uuid": "f3f1c713-5fd4-436c-a6bb-92aab7bf5f2c", "value": "T1B2843910A6C18BE1C456F6B84EE4D630C7296CC81BA096FE9E7CFF558630DA0DE305", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775828108, "uuid": "0f0de151-6b3d-4140-8a70-3e795591a560", "value": "59f37c13d2cae7cc547b602d07aa7033", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775828108, "uuid": "56e99252-8412-404a-ad41-2e7f31155a78", "value": "3072:KXiZYkCItXCGpSFRSJyE18jSaCTBIJCfCr8OIRachyk2Wh/RgaaJzUxtVmj3qh8l:KHkCItizSJJwYmUU3yacEkMzUD0Fl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775828108, "uuid": "41346b99-8482-42d9-b014-1bf096fa7727", "value": 382976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775828108, "uuid": "2c26aa4b-8286-4601-9ccd-9fe554bb9ec6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "467d07c6-34f3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775835488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835488, "uuid": "7fcb862b-39b8-495f-bc3b-cc5a4732765d", "comment": "Malware payload (Mirai)", "value": "169457a3e60db046e2f67d5b1ecd0693", "object_relation": "md5", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835488, "uuid": "5c42d5f2-5a90-47d1-8621-50d8edc8049a", "comment": "Malware payload (Mirai)", "value": "849840d92c44ed04af624abd9e5d79a7a082016c89ac39ac50d19f3d537839b5", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835488, "uuid": "052a9734-3329-42a4-87a7-39174d7f61ed", "value": "T126143B46AA408F13C4D6277AFBAF424533339B64D3DB730599286FB43B8679E4E725", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835488, "uuid": "9cc77b47-56b3-4090-88c9-cecf40c21552", "value": "6144:ZA4V6IO2l5gP3HbHQw4DaAnjKc4VjL2Fin6M/9ZsuBwMWDM:ZFV6I+DQw4DaAnjKc4kgz/7FBwA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775835488, "uuid": "b1b37a3a-8a7d-4987-8af0-95e7349e4548", "value": 199179, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835488, "uuid": "76508f05-378b-435e-9c88-e1c39bce7867", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46819982-34f3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775835488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835488, "uuid": "f8a6b961-c006-49ac-8665-c7bcc9db776e", "comment": "Malware payload (Mirai)", "value": "04d0bab2c1bb225639e74eddbe9d03ed", "object_relation": "md5", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835488, "uuid": "f1c95ac6-7f92-4c8a-bd45-d94832d6e80d", "comment": "Malware payload (Mirai)", "value": "9ea665fe5d5d4c705d31d81918bccdec8038257fa316aaa10a97995c0e4d2c99", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835488, "uuid": "8596965a-4e3f-41c4-8217-9ee2cc28170d", "value": "T114F30945BC918F26C6D622BBFB5E028D372617A8D3EE3103DD255F25378A95B0E372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835488, "uuid": "f6fd6640-e69d-45d3-b9e1-eb4246c298b3", "value": "3072:zrMr/q3J46RUTRqdVjqtMWrMLQT4+Ppb+a0mLk3Wan7:zIrk6EHgzH4za0d3Wa7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775835488, "uuid": "3a5e4302-4fac-4747-a62b-55b92158eacd", "value": 162560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835488, "uuid": "f44bac34-ec2d-42cd-abf1-ec28c04e0948", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "468605e1-34f3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775835489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835489, "uuid": "ce836ec9-aca8-484c-b206-85ff12cd6569", "comment": "Malware payload (Mirai)", "value": "a1beaa3e8d23b9d9b180628474169ecb", "object_relation": "md5", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835489, "uuid": "f5d6ea4f-2d1d-45c3-b84b-fe479c3f0383", "comment": "Malware payload (Mirai)", "value": "1b9afb8283c6396129ffd23aa89cc0321b7a12e995eaf0f98d4d478afb84e2ce", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835489, "uuid": "3cd68bb8-fd50-4ec2-abc9-8e08b224d396", "value": "T1C9F31A45BC918F27CAD622BBFB5E428D332617A8D3EE71029D255F2537CA85B0D372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835489, "uuid": "be86c999-eeaa-4e22-afef-58e64ee89604", "value": "3072:rVZkrfIxfnYLb0Mwv9LF4HRH/n9TIXt7:rjTf40fVLF4xH/ZIXl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775835489, "uuid": "ec79dc17-5984-4b41-8b98-0a916c5dfa35", "value": 170752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835489, "uuid": "b4966be0-0b56-4c41-8c57-010501cce4a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "468e9374-34f3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775835489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835489, "uuid": "08d585f3-ba37-4d9b-9195-4c4355d732cb", "comment": "Malware payload (Mirai)", "value": "978eadd25f6c4d302d6324db951b7d9b", "object_relation": "md5", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835489, "uuid": "9c8970bf-25ca-42de-bf39-e5d7d5854f3d", "comment": "Malware payload (Mirai)", "value": "30bc209286efaf474d4d17d1a18b527ea917ca9965e5be87e02e4eb512e34ff2", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835489, "uuid": "677581ed-77fb-4917-b440-e852dcf64402", "value": "T15B24D60AAB610FFBD86FDD3702E9070139CC554722A52B367674D928F54B64B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835489, "uuid": "30ad7a93-f095-4582-879e-dcb5b03121ee", "value": "3072:ySVheAzYmWpR2l/m3Oil0MOOUmeBOW91nBIAXXoOSr1:ySLeAzon2lMOcOOSIW91BJ4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775835489, "uuid": "0fba6377-1641-4673-8076-ab8aabb55f25", "value": 227276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835489, "uuid": "5e107351-c929-4a94-89f2-2e6b65f26192", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "485af07c-34f3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775835492, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835492, "uuid": "6e4dc22f-dc1d-4c72-ad8a-ebafa8d83ae0", "comment": "Malware payload (Mirai)", "value": "f63b9901ebb6b9ca3d3c60abab21b9c4", "object_relation": "md5", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835492, "uuid": "e0d124ec-db2d-47b0-b7f8-172c7c289cbf", "comment": "Malware payload (Mirai)", "value": "c4c7e3e6b161b8b7d530db995ec95e027f64b92f7cddab536724198fbd403157", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835492, "uuid": "59e74e1f-7e48-4511-948a-5e5485ebf48d", "value": "T1FF041946F8819B15D5D112BAFF1E528E33131B7CE3DE72029D246F247BCA86B0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835492, "uuid": "f526f105-a766-41df-b04c-a3ed4ce6087b", "value": "3072:ACbd1A3Tcm6VmymFHCbuVF3jXbNfuG0tea+TTc1EVhfMBCLy:Aiecm6V7mFHtV5XbN2PcaSwyfMBCG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775835492, "uuid": "c2e22a3c-b8c4-438b-91bd-2e4e0868994f", "value": 180956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835492, "uuid": "995c75af-8e8a-4bed-8de9-2f9c402e896a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e0d2336-34f3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775835555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835555, "uuid": "26261868-8505-41e4-ba1e-4ead775fd52b", "comment": "Malware payload (Mirai)", "value": "e2296e2ef7cd246a6b3bc2da0a09ee3e", "object_relation": "md5", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835555, "uuid": "ec7bc563-edba-49a2-a2ea-2ba6dd1675c9", "comment": "Malware payload (Mirai)", "value": "b79a0c376fa56601f16794f277b95239147443fb42a937ac22c4fede85548b15", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835555, "uuid": "22e249a9-5142-46a9-8968-1f02c3650d77", "value": "T18E24A70E2E228F7DF268C73547B78A3597AD33D622E1D684D2ACD2151E6034E541FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835555, "uuid": "f3a02dfc-8c4e-4502-be22-41de23b3cb84", "value": "3072:Wc6qANIMErR6ntbT/ESAgFPqhxMbscPLRH/AYCw0v1i6ftvGbG1WplKz5Y:Wc6qzJrR6tXMSALxM7tCpVGsW/KzG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775835555, "uuid": "be967f15-9a51-4698-ab13-91631ed93798", "value": 224300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835555, "uuid": "efc038c6-9f86-422d-911b-70aed0ae403b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5e3d3e5-34f5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775836561, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775836561, "uuid": "ce440eed-34c1-49de-81ae-4e1186c19b97", "comment": "Malware payload (Mirai)", "value": "fbe9c954334cb6c8832c8b136968c7e9", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775836561, "uuid": "026fa9a6-b90a-4c98-8b8e-a84efa782575", "comment": "Malware payload (Mirai)", "value": "6b7a6077af12feb73460be5a73dacfc239bfbe8e08bc1cde9f6e61b7e1de9475", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775836561, "uuid": "4732a270-a412-40e5-96ce-3304dfe48ac6", "value": "T146631257FFDC5F99ECDD1AF806EB65DA13919031A07341B80DE29C8A819FE60219A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775836561, "uuid": "f31ab6f3-53a0-4051-9c35-d5bdcb317760", "value": "1536:G7MbwKNGjjH+Xq34n/q8Zu41zmX3sDg8L9XxrP5:G7Mbp2L+Xqdfoz2sDL9BrP5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775836561, "uuid": "ae111dcf-b4aa-44ea-81ad-6f61067f4065", "value": 70860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775836561, "uuid": "7e8536c5-9194-4ca8-b037-1d48a59ef3ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2cf1153-34f5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775836583, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775836583, "uuid": "7112b2d2-2b67-48fb-be5b-9684d5948c3b", "comment": "Malware payload (Mirai)", "value": "b6c72b15e001f7d8787d6c7a286b52e1", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775836583, "uuid": "864b2ad1-9029-497d-87bf-9a53e2770916", "comment": "Malware payload (Mirai)", "value": "35bac26f5c6be15bd4c3c0675774d81f16ec3e1bee3d33cc6cc42ed4c614229e", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775836583, "uuid": "0bb5f4f8-d517-4c66-ab0f-24261b121520", "value": "T10C5302521A6CF829CAE7D93D0B7840E686DC8EE4A492900F53CA7DF44A05D38BEDD5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775836583, "uuid": "1ec975f4-f1cf-4d25-94f3-0caa8e50b9a9", "value": "1536:Mdcqm5iERozq3p7o8FwOA4zCKOFGUfKbeH6UhV/uzKUmAQc:MaHJgMo8FwOA4zUFGUO3UhAzKUBQc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775836583, "uuid": "72bbb606-2fa2-4511-a382-e8770cb2d56a", "value": 63928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775836583, "uuid": "dd40f1cb-d502-491c-8f01-5b4268c3d1b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db8689f1-34f5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775836597, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775836597, "uuid": "c322ea15-2cc8-478a-a80d-5034f10ac1de", "comment": "Malware payload (Mirai)", "value": "cc65375e778e3a5ada4dfbb0e016ce20", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775836597, "uuid": "6726a575-12c4-41ec-87a1-3937fcfd20e1", "comment": "Malware payload (Mirai)", "value": "6bbf02b82c454a6a4f7594674d89526d5c698e45fa513e3711a5c925ace32e11", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775836597, "uuid": "e1f7e697-3a89-4d28-b923-60b959488916", "value": "T1065301E7A0D47DCDC2598274020B5A473EC66378605A6A3A76C0F6A58FF1380DFC9B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775836597, "uuid": "8ed6236f-eac8-4a62-8728-025ae5ce7311", "value": "1536:C1/S5aOdeB51F+yuXkoPgvFbFX6hTZ0f8ASRQ2EuTLkg4azHb:CM5az1Fy0oPgdZX6hTo8Ri2EuTLGazHb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775836597, "uuid": "ec85074b-6e12-4008-9411-955d44c126f3", "value": 60808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775836597, "uuid": "c83cf127-aa76-486d-b363-80705c1f909c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d94b42c5-34f6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775837023, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775837023, "uuid": "9912cfb9-b55c-4524-8586-f7cdf873e9b6", "comment": "Malware payload", "value": "ed4ac037f2aece137380a33858e0a0a9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775837023, "uuid": "05e6aa37-9c9e-4155-8ec9-2e307c2c044a", "comment": "Malware payload", "value": "b9215a695a179da4493c5e6a84dcba5f6985ca7acdb7d4c60dfb63a31eb5371f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775837023, "uuid": "723eddf5-d3b9-408c-b6bb-49b9c016ceda", "value": "T1CF8309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775837023, "uuid": "109b7f14-97dd-44df-b4ec-49a45d672a9c", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnhWaSVN/:XEKltp9txAX/yr2pbhWLVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775837023, "uuid": "4336deaf-4f78-42bb-9152-10eae8112e0f", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775837023, "uuid": "58f8870c-a474-4704-b434-ffe812e7a382", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b91bdef1-34f7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775837399, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775837399, "uuid": "6a07303a-8b94-419c-8ba6-a8b7021c61f6", "comment": "Malware payload (Mirai)", "value": "d08a02a778069a0b5bf9ab11a88d7fc8", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775837399, "uuid": "f9fd971b-a3ae-4af9-8f67-9474792d2d82", "comment": "Malware payload (Mirai)", "value": "79be1937411b567b8c8b269a9a806c4c8cd6584213b79ba5176d290532d13c6b", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775837399, "uuid": "869efdf8-a515-4045-95e7-f242dc46fb2f", "value": "T18D146C2BB3C39CE6C51063308C316362776FD7081958EAFFDA1B3794A9977225A246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775837399, "uuid": "ce2f6bfb-94a2-4a76-9177-46730bb67959", "value": "6144:1R9Om5159ZA0mzoWcz4Mm4ztkES7IKTtL:BZAyFzQSdS7Ii", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775837399, "uuid": "6405e231-7669-40b3-8575-4f79c8608b28", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775837399, "uuid": "8ee0bcfd-ddab-434d-9fe9-5502f3b0a72b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9de6887-34f9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775838313, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775838313, "uuid": "daaf5525-d445-491a-9f39-d173b84354f5", "comment": "Malware payload (Mirai)", "value": "b0880852d724f234ea713a46b29e97fb", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775838313, "uuid": "9e35e3a8-428a-44de-9b03-bc1c9d953d57", "comment": "Malware payload (Mirai)", "value": "6235cf907950c724116726ff08edca1891492c58491cff0e0ef62522302265e6", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775838313, "uuid": "0c2bee45-0857-416a-804f-c15d6a3b5e7e", "value": "T131D3CF32E0086DA0DD2117B43476597C0340DEB40AD59243EFBEE5AE28B7DA57DEEB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775838313, "uuid": "2ab5e702-48c8-4c3b-9ad5-410a466c51c5", "value": "3072:jNOFV2mOAc6NBmjOd1CVOHVv3WDxGGRhaUNhkv0Ze6:xOFgpOEoVv3MXL5NhGOe6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775838313, "uuid": "5a19896e-52f9-4705-ba57-ad8132a9af0e", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775838313, "uuid": "a2dc80f5-bfff-4b55-a0f9-aa2124fb0965", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b37fa29-34fa-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775838476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775838476, "uuid": "885cb8dd-799b-4ad8-b7a6-cbf063ede65f", "comment": "Malware payload", "value": "61ab16164910d9331ef63661fb977f7d", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775838476, "uuid": "7de0e171-bb18-4375-9383-f625d75dcf15", "comment": "Malware payload", "value": "74b6bb5f2f40662cf291e18cd659a7b9a7267dbc9d163a70f9bc8773a5d8aa25", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775838476, "uuid": "08675570-779d-4f00-ad1e-58a287215643", "value": "T1238300326DC1B07B00A3B1D19A226B49FFD59247CB879920F1EC97879FB7E95AC231", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775838476, "uuid": "db1f941e-ffe8-45a3-b5f8-f0eb4a8b8028", "value": "1536:TUP3jqE+H+F+s+h+u+3+s+B+u+3+s+Y+u+3+s+5LpYCxflTGBK8sRU9l9x9oYlPF:ALpYCxflTGBK8sRU9l9x9oYlPBEMn1n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775838476, "uuid": "0e3077a8-ea7a-440b-8748-78612e9c6f8e", "value": 81642, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775838476, "uuid": "d4c4da34-67ef-4dc7-930f-62bd561dd7d9", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb3b7959-34fa-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775838798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775838798, "uuid": "4c5999a7-b79f-42f5-b84a-53be5c0ca0dd", "comment": "Malware payload (Mirai)", "value": "51e467c0916048fbbe9cd496237e7f57", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775838798, "uuid": "357c8910-3f27-429c-933e-9a925dfa600e", "comment": "Malware payload (Mirai)", "value": "8c807c97aca5c9798ee57af6276220e1d2dd8a866784b33597042acadd222dd9", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775838798, "uuid": "25ce4a2f-3f14-491e-b3d5-7841142ac9f4", "value": "T14F6302CF7E703F17C0D8E1B530381999C83A9DCAE2938A5C97E1A7954739432608CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775838798, "uuid": "16c60e7a-cf88-48c8-b4c2-e4330d87529e", "value": "1536:kaxZLmYKVDNSl2y08yumeJyGYVmIMGnTXIGN9:kaxZLmYKX+t08jmeJhYTDBN9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775838798, "uuid": "5c63f93c-b58b-463c-bee9-7bac1bac7b50", "value": 70460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775838798, "uuid": "7673c2f5-bbfb-4df9-936b-c1460eff19ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2941b2d3-34fb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775838875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775838875, "uuid": "2eac8550-2653-4883-98a9-4ef33a0a1fbe", "comment": "Malware payload (Mirai)", "value": "a612b28c82f7c49cf3f9d7d09b81cec6", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775838875, "uuid": "b66633c0-6f5e-46d4-8c61-969f67bb9a73", "comment": "Malware payload (Mirai)", "value": "b185cfad3664ef6fb071c55fd189b3259c4fa131171858d4ab31594761b39d30", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775838875, "uuid": "50a00ec4-15d2-47c6-a8bd-4bdee2bbc6c3", "value": "T190B3E085B210AA55C02672FCB187099093B17E7B4B9A150B44B3F5B46DBCCD47E0BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775838875, "uuid": "86cf74bf-b727-4f54-b1c8-990468532f60", "value": "3072:jx63zpjhO5z01nCU375P5wk5SOez7wud:as5zqhr5Nzy7wK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775838875, "uuid": "003fcb43-770f-4a4d-a8c9-82b52754c6e0", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775838875, "uuid": "70ed70e4-eb29-4839-9b93-5dfc89266703", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8a092a2-34fc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775839572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775839572, "uuid": "b6b7611a-d886-4029-9f64-8217a6d0b400", "comment": "Malware payload", "value": "6c2f276ba8851b48354db2f49ef57e80", "object_relation": "md5", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "clipbanker", "colour": "#5efbe3", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775839572, "uuid": "de398531-7def-4a9a-be9f-262940bdde4c", "comment": "Malware payload", "value": "70705bce0d1386b78ed87f9fe71770106c31116195310837bff6f195451a1775", "object_relation": "sha256", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "clipbanker", "colour": "#5efbe3", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775839572, "uuid": "8f7702ff-7475-4cd7-9fa9-046afb240fb9", "value": "T1E5C5E28D775D41ACC56244B210F10A92A7B9DB16A3E85E071BC6CC788E120DDBBBDB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775839572, "uuid": "b269215e-0b75-4d82-bf16-8ef05bd0ded9", "value": "393d779b279452acafa3be6bafa76ebb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775839572, "uuid": "67db76a6-5c2c-4106-bbc9-0c11bbc0142a", "value": "12288:xB1PLvjJtIGuYsl4wcxOSKyiG//87gRgYafcCxlNv//8G0pDdly8ECd9EgenPvq:xBfzml5c6yiHCPc/5vXL0pCC0gePvq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775839572, "uuid": "a9b9e9c7-3d6e-446f-9d9f-b9524f73ac84", "value": 2697216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775839572, "uuid": "b6d42816-d17c-4a20-82be-6651ddaac844", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b89b7d0-34fd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775839711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775839711, "uuid": "5652bb25-6824-4e63-8659-30a012a7d12f", "comment": "Malware payload (Mirai)", "value": "8745333a26c2423bdf4d9f7e549baaab", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775839711, "uuid": "5cb0dee0-9a06-48b9-9898-13fead9a9055", "comment": "Malware payload (Mirai)", "value": "6c54c63eb33949af085f793ef8f38edc2f2d22a0e6aa660d4281a943f63347e9", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775839711, "uuid": "cfdb25a0-8d7b-47dc-900d-4f99dba0b0eb", "value": "T106C3F185BB6369D1C1A242BDA4C00AC387916E318FE317080699F674387DDFB1F69D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775839711, "uuid": "c1c5ff18-b3ac-4a30-b2cb-175ab3230dc9", "value": "3072:OBb4K+nqsnSjZldbaUXGSgqTWo1OWqEwztlMMTnK:0OCDjXG9qTWywxlxTnK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775839711, "uuid": "ffb7bf13-cf51-434d-9088-14f7f8e423e4", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775839711, "uuid": "68a99f5b-6d43-4419-ab9a-69a2b252aec6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3878d307-34fe-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775840189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775840189, "uuid": "82adec9b-3dbe-459b-ad26-eb691f780d09", "comment": "Malware payload (Mirai)", "value": "e146f9ef6407f37d972d1ca2fc7196a4", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775840189, "uuid": "62874c16-9f6a-42e3-b231-5dce1b15ec5d", "comment": "Malware payload (Mirai)", "value": "0b144535a366d68cb8bbacaeb53097a8a7d4ee4843dccc2bb61f252af90aa573", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775840189, "uuid": "74a84d44-8ad8-410b-98b0-1e7a2ddf3355", "value": "T1E704392F258191F0F6411B746BCBD3976C390BBF51A9909F6B416329B6E0B7BA02C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775840189, "uuid": "8a17d9cd-b34b-4654-979f-fb887392fbb9", "value": "3072:7mPX5bl7RDfPIX5eG/L1AL0SFU66gOSNL9CnNgRdgJi55wnUXS:7eJpJUVD1A8n0YNgEJi5aUi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775840189, "uuid": "0abeb031-e32e-4b96-a068-243a62deef71", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775840189, "uuid": "45d6c628-92e3-4d11-8732-f3b5580e0376", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6efc8b5-34ff-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775840912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775840912, "uuid": "ce8c5839-5156-4ca0-9169-d39419dc9cfa", "comment": "Malware payload", "value": "e13766c87be1e91654cf8f7a8e415ba2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775840912, "uuid": "e42939dc-51bf-4859-bce2-ba2da7e312cb", "comment": "Malware payload", "value": "2be35e30a426141a000de8961f893ff70f1e7ce65ae4271103e32a7f79d65cb9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775840912, "uuid": "73bfa20c-a477-4589-be3e-50aef6944324", "value": "T1A793E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA523895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775840912, "uuid": "3022be62-fab7-4194-a6bc-8adf031beca9", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXcIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775840912, "uuid": "1cc9323c-1d9b-4ab5-acfe-583d4b9ecd28", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775840912, "uuid": "ce4b108a-b4fc-4005-90e3-efad70836436", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4887769-3469-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775840991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775840991, "uuid": "53be05e5-f7f1-42c5-a981-d70635c5ce2e", "comment": "Malware payload", "value": "c503542d2c124bde6b4e3c30ac08b43b", "object_relation": "md5", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775840991, "uuid": "9c7e689d-99c0-40f8-ad86-88509ce2da63", "comment": "Malware payload", "value": "59e26d28d25f4e771df6f9bde05b9c421ba81981d4f0f930bf560245251b4092", "object_relation": "sha256", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775840991, "uuid": "0aec0dc0-ca12-4ada-b5f2-a833701442e9", "value": "T17DC58C0B7CA505FAC46A973188B76192BB70F8480B3233C72E91B6782F767E05E797", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775840991, "uuid": "0d089ad5-3383-4642-9a88-d99334a40a1f", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775840991, "uuid": "de7e91b0-3f32-4132-a71f-642240cb3d1c", "value": "49152:fGppXCJ3zu4BEMeHiiA/g7mZV+8aYA6FFpc71N/2bUzPk:f0k0gciiI+8BAAq71N/RzPk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775840991, "uuid": "da60f763-1e52-4fe9-8ec8-91f16740304d", "value": 2542296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775840991, "uuid": "779c0185-ca3a-4992-a3e4-7eccce0550a6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cda5a57-3501-11f1-bc00-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1775841619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775841619, "uuid": "e4614524-b124-49f0-a1bb-e2ac7fd55951", "comment": "Malware payload (Stealc)", "value": "2a8481955b012a372eae862d4026b290", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775841619, "uuid": "f3d5cfe1-5688-4771-963f-4c1167e75ed2", "comment": "Malware payload (Stealc)", "value": "fdda217f7681167cf0cdc30ca249daf035d1f76426e56902a18e0b9a4d62de64", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775841619, "uuid": "48438948-c918-4dbd-ba6f-4000361178b8", "value": "T119D58D07BCE549F6C4AA8231893692897B31BC880F3253D72E64B6782FB7BD45DB57", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775841619, "uuid": "ae369ba1-8966-4554-9ee0-86d6e9d81fcc", "value": "ebc247a77b4d4a804b261f97a1fd075c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775841619, "uuid": "382d250b-92f0-4c8c-accc-51c47ac0507b", "value": "49152:CEvLIc1sZIUkgMpYO5MYF5Yj2aMV2YSGyE9m0i:CETJSKbFZzV2YSGy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775841619, "uuid": "fd8c90a8-20bb-4e74-8d0e-0d3949da082c", "value": 2773504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775841619, "uuid": "0eb2f028-dd06-491d-a8fe-4689eb25cd59", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cde6b199-3502-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775842158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775842158, "uuid": "1ca13251-50ab-4936-8c32-d497db0e541f", "comment": "Malware payload (Mirai)", "value": "9d8e92200918948fff59d95a0f48dbbb", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775842158, "uuid": "08bcdc3b-6b95-4fb8-989a-4db5db21e67b", "comment": "Malware payload (Mirai)", "value": "41f1e679dfe4f6a1d0b622623e5fd86e6b99188ea45a0328b09b76825dde7640", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775842158, "uuid": "878bdd7b-5bd7-465b-b6ea-5b2f3c4552e3", "value": "T1CEB3AF87B2907ABEF0A45E3FC4135E26A6259F705583273D71FDF9906E3A3503292E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775842158, "uuid": "116cc87c-4d56-4304-a1f1-fa92f2ebeae4", "value": "1536:tdNSXAeuUGWnKYUqwaJ1Xq/3A5hcB57laZeCNjHWBOdiyWT15Ov6fHzR8rSR:t3SrlGWnKTU83AQB5A5Liy36ftUSR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775842158, "uuid": "1d878582-bda8-45b0-9fdf-f04eeaa19cd2", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775842158, "uuid": "542899bd-178c-4052-94a5-d07cbdefdc57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cefe28f-3503-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775842479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775842479, "uuid": "c209169e-9e67-4f9f-b43a-00b8a19a8ff7", "comment": "Malware payload (Mirai)", "value": "100c606d38921ea0cc87c6363da60022", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775842479, "uuid": "30bf15f0-d093-42aa-8983-0c0d0e47f949", "comment": "Malware payload (Mirai)", "value": "2066f8dc782e4fcf9a0cb4bbffc626f2c9a4565d584c41b48d3f96e2abe3c4df", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775842479, "uuid": "0a74d0d3-0805-4bf6-af31-891f82a15311", "value": "T109D3B021E4006DD1EC2129F578BA96B80350EE740BDE1582EFFDF95E647BD9438AD2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775842479, "uuid": "403fd2f3-dfd0-407a-8967-fe59bd52ddf5", "value": "3072:PnicTtkAg7FSGp+VJE6AqUjq+c7zAbpb9/xo:PiySSGp+PMmT7zMplK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775842479, "uuid": "404dcae6-6b5f-440a-b484-d757165221e4", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775842479, "uuid": "4276cea6-76a3-41e6-b032-e5d71c3a0c40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92b93984-3503-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775842488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775842488, "uuid": "00a943d5-773b-47c0-b418-e8a53654f940", "comment": "Malware payload (Mirai)", "value": "be0538534851fec09ec5fb4686423bd6", "object_relation": "md5", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775842488, "uuid": "7dcb4eed-7c1b-463c-84b8-8cc74bb3d74a", "comment": "Malware payload (Mirai)", "value": "8616c0e3c4329bdcd1f1410dde46f71b8571a120c9949df82f53b94ca9182d4d", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-52", "colour": "#9bd328", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775842488, "uuid": "a7a79792-9ff4-46aa-8d13-7698655f79b6", "value": "T109147120FA0663B1CC731A34A79A2E5A6E7704559FEB26312D1F533CDE628509B31F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775842488, "uuid": "983061d0-20b1-4323-b94b-d0eb226b7cc3", "value": "3072:IcHZcggt1NJmeDQBwnKUDMaVsb3pjr1lCRvUKG:IcY5JpMByVs9jS+f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775842488, "uuid": "c014cbf1-26cf-46dd-b966-d9f9ba5e9167", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775842488, "uuid": "43ed4e19-0694-469e-b564-df81f2a8428c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a684f92e-3503-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775842522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775842522, "uuid": "a8aa08e4-38cb-4136-8638-63e7fcaab28a", "comment": "Malware payload", "value": "6c7f995685768c13e133c8e59e228a2a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775842522, "uuid": "33e1c75c-7935-4030-8510-28b455bb5236", "comment": "Malware payload", "value": "d08debb0916994c9ab68e4eb2acd524f9f1054ffb806b1b0b35fbe210136ab8c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775842522, "uuid": "bcf857da-22d6-443f-a695-e41abf56d5ce", "value": "T1F5931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775842522, "uuid": "38534e6a-6004-4510-9cc3-3841c0403832", "value": "1536:0Byp1tF/uwMmAIa14oXx+IMepeV7tb73WdxCrCitkb5fv2v05xsprCKD1sPyKKt8:08jIL0GitkbFv2v05xsprB1sPy1t3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775842522, "uuid": "3c8866df-9f47-4408-a953-a5432619981a", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775842522, "uuid": "67407929-174b-4644-8a89-9a4167a0ea9f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ee9e3fc-3509-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775845086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845086, "uuid": "916fc9f7-017c-479d-ad15-12709d15f54f", "comment": "Malware payload", "value": "cb4ceb094d6824dfe3a5950f028af46f", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845086, "uuid": "ac5d207a-b3b2-48e1-9d70-68a9c98385b6", "comment": "Malware payload", "value": "b6df92f5abfa65bcda4b72daf6847134740e327d309674db385c787ee3113bd5", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775845086, "uuid": "2de95630-3a19-4850-a35f-424c58d4156c", "value": "T13AB423107201252F8369FD84B3ADA1FAAE77B303895C463E31B07B6E2252D5CFD985", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775845086, "uuid": "350e7685-34b7-4217-aa0f-ca94c5a04907", "value": "12288:Pf00UVBCIq2HX0hy1QzdVhR/sb4W/o1o1PxEXum2BA8P4kviDLmnkaEMH:P80n4k1z1u9oyPxLPTk0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775845086, "uuid": "2b793964-75d2-44fb-993d-59c319a2adab", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775845086, "uuid": "47b07597-ebc2-46ce-801a-9583732c5c4a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e36404f0-33d4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775845146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845146, "uuid": "25c3e1bf-e735-4f44-a5be-0e7674fd9273", "comment": "Malware payload", "value": "acf70dcee3756efa82c6fa20f5a173fb", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845146, "uuid": "c2d68cab-9572-4bed-afbf-ffb35292c0a0", "comment": "Malware payload", "value": "acb9cdf424f5ae5eb4534060620a87a59cbc3c997ea940873566840f46f7ef62", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775845146, "uuid": "ade1c6cd-5bcb-4cd2-85a2-23d22fd1af1d", "value": "T18BB423A0BD14DD5E27B4083317F3442AE780D19D8997789374161A9C7FDACC2E9DA3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775845146, "uuid": "f4e9c5bd-4c2c-4b1f-be53-0589085986a1", "value": "12288:PsJkvyRy4fPM7zpk9PrE7smEzwQf2CT7mtL5B/AzNG1Jkvpp7M837QfL:PsJSmM7z+Pr4smE8hC3mx4Njpp7M88fL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775845146, "uuid": "b6965e42-f4b2-4005-871a-1f2d17fe452a", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775845146, "uuid": "6e372686-6cb6-48d8-aaf7-1dff6d8a5cfc", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2f61a1d-3509-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775845146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845146, "uuid": "4064b606-1bb7-4aef-84f8-85694598adaa", "comment": "Malware payload", "value": "4ee7fd58061701cc9ddb2cca8a1337f5", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845146, "uuid": "23762222-2723-4106-b292-c14c55a60c49", "comment": "Malware payload", "value": "f15b435d9067f75967d3899ef0eab7e462ebbb357e6debd22f7d400c9d4d536d", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775845146, "uuid": "a89c4ba6-d6ea-42ae-b3bc-e6078d5d92e1", "value": "T1FFB4236E13F08288324DEA5327C7D7175A3BC6A6F6CB610E01E1AEDC2B77579E5D08", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775845146, "uuid": "3d925ec4-7a2a-4a73-92da-84b02b477069", "value": "12288:1VZiPmlKHSgqvWLeICMcEM19PktX0CU2WknQo44DwD:XmxygqgPtkl2BnDk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775845146, "uuid": "8cef6747-5e25-43f0-997b-e99b036fa492", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775845146, "uuid": "ef487116-d792-4087-bad7-a0ae6d774332", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3157687-3509-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775845146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845146, "uuid": "def397e9-d002-45fd-85fa-2a03cefc310f", "comment": "Malware payload", "value": "e6fd50fbd1bea9bef346cb699821d4de", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845146, "uuid": "1747457b-4000-4862-9506-e1b7d022b1d0", "comment": "Malware payload", "value": "1cc9727667386f81b9b944da5732e251308ab67a8c46c06519318fdfdd570358", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775845146, "uuid": "df700413-0dd0-493d-a1c3-7199d4fde8a7", "value": "T1C9B423902F4BCE842A71C3BB241F5B3DEE0A40377FA4AAF170A18E054D9E66BD5C65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775845146, "uuid": "cd8ec3c2-932e-4d49-b3e0-6f263ceb3894", "value": "12288:cPIrku9Lv80q+XOabEJh0g8OyfQb6Rj5ugr+2vX4yoP:cPIrku943+VbuhF8xU6fl1IP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775845146, "uuid": "1b57b3db-8e92-4dcb-8540-fded49d146f1", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775845146, "uuid": "45364275-f296-4263-907e-dedc59658bb6", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775846711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775846711, "uuid": "61eda159-27cc-4235-8e73-ce398df7db50", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775846711, "uuid": "aea77227-05e3-4c68-9bd5-12d31897d64b", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775846711, "uuid": "679118df-5aa8-4482-a05c-8ea35742d253", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775846711, "uuid": "0f4aacbd-ba9f-47f9-963a-d3a637f50f39", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775846711, "uuid": "69af3e13-7e82-42cd-b59c-e296a5418b99", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7b12afe-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775847731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847731, "uuid": "1467bbdc-b6f1-4dfa-823f-57e3e5d66616", "comment": "Malware payload", "value": "0c508a2bcc1b6d8bbed6c9e51f6acae1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847731, "uuid": "9372be61-c6f7-49c4-91ba-0b59a08a0a5a", "comment": "Malware payload", "value": "565ebdbc3a1d3c26c7a81f89e560dbfc96b2e8cb8ad258184a4bf8ba2a903c00", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "bb475d09-57f0-4f77-8006-74ea844a32a3", "value": "T18E46F141B3D695B6C0BF0678D87A52AA6734BC048312C7EB57E4BD297D327C04E327", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "6312338f-0962-4eed-a1bf-73edc50a3307", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "99343876-dd50-4bfd-a1ae-7b4cc6c3c608", "value": "98304:7ds6efPc66x9G6GYjTG7WSvhrG9N9vlcUR:hfefPQHGYjMi9N9R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847731, "uuid": "2e164cd8-dc46-4f2b-8740-31500ca7805a", "value": 5531728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "7ab85f1f-606d-45d2-8e5c-616ccc0ab584", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7c0e983-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775847731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847731, "uuid": "afac6cfb-e554-4ae6-8e5a-8012240aba48", "comment": "Malware payload (ConnectWise)", "value": "e7ca4381865f1c76591bc956e49a72cb", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847731, "uuid": "612c2f0c-10aa-4dd6-93a2-b7f1761e2599", "comment": "Malware payload (ConnectWise)", "value": "9acd61a086b8a738735d5027f8ff70c62ed0ccffa1583710cec3294ebcf1faee", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "f13ac9e8-b6e6-4206-9fe5-8e9740a8e053", "value": "T19346E111B3DA95B9D4BF063CD87A82699A74BC044712C7EF53D4BD2D2D32BC05A323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "8704e685-396d-46ce-a82e-1988864a68bc", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "ffbe0ccf-5736-4f88-8559-66ad20420d5b", "value": "49152:GEEL5cx5xTkYJkGYYpT0+TFiH7efP8Q1yJJ4ZD1F5z97oL1YbGQ+okRPGHpRPqM8:DEs6efPNwJ4t1h0cG5FGJRPxow8O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847731, "uuid": "63e2875e-2da4-4df7-a6dd-7e5a8183f711", "value": 5620616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "0020f9ef-f0c5-4f08-a8fd-8d17625b2799", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7cd8a31-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775847731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847731, "uuid": "4a338536-1b64-474b-b2a1-b23aa5251797", "comment": "Malware payload (ConnectWise)", "value": "f3e7bbeef08ec607497bb184cce6c5c4", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847731, "uuid": "add65279-2e42-4ee8-8d11-3c34c756e3da", "comment": "Malware payload (ConnectWise)", "value": "96ebcfa97a826b61da72287993d9dbbd3ed6e18437a972de51ae8db8b3a21108", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "1054594a-8058-46af-b9d2-99a4b6c10fc4", "value": "T135A6232523FD801AE8F75A7DED3682F45972BE64CE22C11E9328BD0D2974D4096727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "62efccb2-4811-4bd6-be3d-666669afab16", "value": "98304:/wJ4t1h0cG5FGJRPxow8OPwJ4t1h0cG5vwJ4t1h0cG5RwJ4t1h0cG5twJ4t1h0cW:4Wh0cGw2Wh0cGCWh0cG4Wh0cG4Wh0cG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847731, "uuid": "564dbedb-8aa9-438b-9149-0a5c826d2a4f", "value": 9912320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "5df79ea6-0f6d-4233-b228-c2486d451081", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7e746d3-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775847731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847731, "uuid": "929ad5ee-034e-4a89-993a-8850e266cdb7", "comment": "Malware payload", "value": "f52eda1a2300ed86b6264527f9a96790", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847731, "uuid": "bfb16013-1bf3-4ee6-876a-a8442199a1c8", "comment": "Malware payload", "value": "590c422cf1fd26afbfcb6a13a2c5cbbec4610354eb3366b52eec59a88c7e91ac", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "a43eae9f-5df3-474a-9e2f-c2cf957078e4", "value": "T14346E101B3D695B6D1BF1638D87A52696734BC049316CBBF5394BD392E32BC04E323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "e0296340-2e40-4963-a6b1-10e05c267931", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "9982e181-96ec-4862-bb51-2301aa5eb9fc", "value": "98304:WzIus6efPUIdoaxcp8wy5c3trGOlkQ5DUOgJ9zl:WhfefPtHxcp9ym3nltDUJV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847731, "uuid": "ff2a9065-52b0-4fe2-a008-743121b14e0f", "value": 5680144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "c65977e0-d01d-44f9-9835-e00d6f4296ba", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7e80824-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775847731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847731, "uuid": "39b3c90c-16eb-4cf0-9e41-a37f36bb2b59", "comment": "Malware payload (ConnectWise)", "value": "5608eb65f92baf4265173cb8604201aa", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847731, "uuid": "d654c8f9-4329-4d6c-baac-1b42e2f062ef", "comment": "Malware payload (ConnectWise)", "value": "9ec14ff5aaca8e160b62790f86316a1edd3ecd6e1a85114017060ca87605c7c5", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "131e4ce7-89b1-40b7-af91-40e5df22f5be", "value": "T1E446E101B3D695B6D1BF1638D87A52696734BC049316CBBF5394BD392E32BC04E323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "2fb142e9-bbab-409a-9462-d01a0674028f", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "05a595eb-4385-4512-be15-1aa70cbcbff8", "value": "98304:6zIus6efPUIdoaxcp8wy5c3trGOlkQ5DUOgJ9zl:6hfefPtHxcp9ym3nltDUJV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847731, "uuid": "73d54a61-3f40-411a-8e00-2577b05bc61f", "value": 5641544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "79e6075a-0318-42e3-a014-8b4086ca0da3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7e812d3-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775847731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847731, "uuid": "8e83f6d5-c0be-4e0e-a4d4-e52c9c5c2853", "comment": "Malware payload", "value": "b79f87f57acf4e4fa53465f2874fa003", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847731, "uuid": "d1c7f1bb-ce06-4c6e-85a8-fd29f44ca097", "comment": "Malware payload", "value": "4a5370b7138393d50c0dd9453148d46a5acb95ca7616856e1594469211a7b9b0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "3c2b246f-ccfd-4fec-9ab2-5c526dbb4b1f", "value": "T1D246E101B3D695B6D1BF1638D87A52696734BC049316CBBF5394BD392E32BC04E323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "e534f80b-f4e3-4564-bec2-89fca70f115d", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "59ed5fc0-77e3-4144-8e85-79859ad89896", "value": "98304:vzIus6efPUIdoaxcp8wy5c3trGOlkQ5DUOgJ9zl:vhfefPtHxcp9ym3nltDUJV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847731, "uuid": "795ba3ea-7ce0-4832-9d91-3610f4728504", "value": 5680056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "ba381c51-c356-44a1-a753-98c212637031", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7e869a2-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775847731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847731, "uuid": "4e7879cd-0b9a-4f2e-b176-4f09a3aadfa5", "comment": "Malware payload", "value": "983df9c27cb5ac28c437dc15546a06be", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847731, "uuid": "88a56d91-7bcd-41ce-8d93-8d675234544d", "comment": "Malware payload", "value": "5bb530133768ae5bf30ec7ed7860b04283a5f4460e835d99a4fbba7c464b1562", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "8cc7034d-d482-45a3-8067-14d207a84c33", "value": "T1F046E101B3D695B6D1BF1638D87A52696734BC049316CBBF5394BD392E32BC04E323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "53364536-ebb8-4788-9145-37fd76cd8f77", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "35e69dfe-3f57-4329-983c-f13e1f5b3c28", "value": "98304:BzIus6efPUIdoaxcp8wy5c3trGOlkQ5DUOgJ9zl7o:BhfefPtHxcp9ym3nltDUJVto", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847731, "uuid": "348367a2-24b9-4e60-b9f2-d60c5542b37c", "value": 5770960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847731, "uuid": "bdc613dc-7fe8-4529-a05f-739304d82c8f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca7b13c2-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775847736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847736, "uuid": "7eeb1c21-b512-47d6-954f-d3b3895a5071", "comment": "Malware payload", "value": "f4e1cb6c95b9b6393af702313259600d", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847736, "uuid": "e7bf98df-b478-4165-a955-dc871beb4cc3", "comment": "Malware payload", "value": "99131cdbd1288794d24c7797650c15c875f351dd7c44bd554b668adb77db1a12", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847736, "uuid": "2d5175d9-879f-4e81-9853-21c7252d50c5", "value": "T161D622136BF89E67E0B1DB74FF365464A7277E055922B1EE1214790E2F70A8089A33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847736, "uuid": "c8a2c481-546c-49c9-abc1-d32eddc3c9c9", "value": "196608:NHxcp9ym3nltDUJVPHxcp9ym3dHxcp9ym3xHxcp9ym3wHxcp9ym3gHxcp9ym3NHP:/GplpkGpPGpjGpeGpOGp/Gpw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847736, "uuid": "3975a1c4-48ce-48ca-8b53-669724438b6a", "value": 13541376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847736, "uuid": "7d7c7564-e374-4969-9994-c96d4d053a5c", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "caf5c8e0-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775847737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847737, "uuid": "31171ef4-8588-4a10-8716-629b6c72799a", "comment": "Malware payload (ConnectWise)", "value": "f83be0d8a41b699f231e684710f844b7", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847737, "uuid": "67834592-fa36-4e58-b744-8a13e3afefbf", "comment": "Malware payload (ConnectWise)", "value": "b348d68a22e2fc6223762ecb99c6269a53fad24106a043d0fa2fc42a22b76803", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847737, "uuid": "76a0388b-7d4c-41f0-b365-ae9e801370d7", "value": "T15646E101B3D695B6D1BF1638D87A52696734BC049316CBBF5394BD392E32BC04E323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847737, "uuid": "9624fa80-a3b3-4a36-b5fe-2232b66d5ae7", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847737, "uuid": "4b368d91-102d-49ac-821e-52911dddc02b", "value": "98304:vzIus6efPUIdoaxcp8wy5c3trGOlkQ5DUOgJ9zl:vhfefPtHxcp9ym3nltDUJV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847737, "uuid": "ac060a7c-efe4-48b6-89a1-ed878320a9d0", "value": 5643000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847737, "uuid": "abcee0f8-775b-4d06-b321-8014998a3bfa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb021e61-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775847737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847737, "uuid": "147e4d20-f12b-45c7-aff4-ebd4786c11fe", "comment": "Malware payload", "value": "3f41c0a17b9c9797493a83bf4cc943e4", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847737, "uuid": "69380e4f-80fa-4738-8e28-1dc3db2624b5", "comment": "Malware payload", "value": "aca09e6fbdd66200385181be3b9763e35d35c205af0791f9ebbb504149f19aa3", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847737, "uuid": "a80c0976-cd24-46a5-a964-a8c77905064d", "value": "T1E2D623116BF89278F0F22A35E876A0B1A5377D525E22D12E2324791E2C75EC0C9B37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847737, "uuid": "05cca312-5ce3-4906-8428-a7214ab3ce46", "value": "196608:SHxcp9ym3nltDUJV8Hxcp9ym3RHxcp9ym33Hxcp9ym3CHxcp9ym3tHxcp9ym3OHe:gGplpLGpDGphGpQGpfGpcGpB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847737, "uuid": "cb90f3d9-2e38-4fca-ad19-3c627918e0d8", "value": 13524992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847737, "uuid": "301b3848-8abb-4fef-9a66-0ba0d11fdc76", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbee8718-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775847738, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847738, "uuid": "151f0a16-a4bb-448b-9114-32d967648878", "comment": "Malware payload", "value": "845b9bc55c296a134d58ddc6ef27a8f2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847738, "uuid": "f26fe239-36e5-4302-9399-598681051ef2", "comment": "Malware payload", "value": "98eabba961b7e9f6fd18445c3059213cc0b8506792872f415989b8d3f69c5b33", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847738, "uuid": "dc40e84c-08a3-4f77-96f1-1084faadfc07", "value": "T19A46E101B3D695B6D1BF1638D87A52696734BC049316CBBF5394BD392E32BC04E323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847738, "uuid": "9c7063fb-2abe-411b-b834-9006f7ea0dde", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847738, "uuid": "7cdce628-39a2-4608-a6c0-155073f6ccdb", "value": "98304:wzIus6efPUIdoaxcp8wy5c3trGOlkQ5DUOgJ9zl:whfefPtHxcp9ym3nltDUJV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847738, "uuid": "ec27b22b-7413-43fc-a496-2970a450948d", "value": 5643016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847738, "uuid": "6e10a973-51ed-4974-bd01-c47c993542e9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbeea396-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775847738, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847738, "uuid": "c658879e-5fd8-4d6d-914c-96758a894856", "comment": "Malware payload (ConnectWise)", "value": "fc60cd2db1f9eb73229dd2617c45348f", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847738, "uuid": "12f817ac-f3ca-48b5-b3c3-8231ad6ece90", "comment": "Malware payload (ConnectWise)", "value": "a4cd14ede10bff0b1ad9f79b732eb3e8a79d0d002d4a1147126196321951a3ca", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847738, "uuid": "1a7dda0f-6cf8-4e4a-82e9-fbd89e880dec", "value": "T13146E003B3D599B7D07B8778ED7A46656734BC048311EAEB5394B9292F32BC04E323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847738, "uuid": "6740c44b-0a36-43f6-b123-e7940bb86f73", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847738, "uuid": "0b99d0fa-a2a1-43a7-ad42-cbdbfc590ccd", "value": "98304:7zIus6efPUIdoaxcp8wy5c3trGOlkQ5DUOgJ9zl:7hfefPtHxcp9ym3nltDUJV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847738, "uuid": "43acdc06-dfab-4686-9e39-a429ab209c70", "value": 5687216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847738, "uuid": "0eb26a0d-cec2-4dd7-9c8d-0f14aac2145c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc193d6d-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775847739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847739, "uuid": "bb218c60-edff-41a2-9d4a-9106772c88d6", "comment": "Malware payload (ConnectWise)", "value": "8023fff187838350ac81674d0a289ff5", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847739, "uuid": "ebf42403-fae7-46e9-9f24-90b0a44f2e1c", "comment": "Malware payload (ConnectWise)", "value": "405bd5e7b3350c01af102f0b22b913fd3fb391fd7040553fb3bf4fea348892e0", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847739, "uuid": "9748e6df-02be-45d3-b6ea-b683c4af5a7d", "value": "T177D623226AFD8599F8F39F34F93AA9A5853AFC248D62C01F1715780E1972B4186733", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847739, "uuid": "9dfef8fb-3f44-4a94-b26b-d9b1933241fd", "value": "393216:scVPOBdPcVPOccVPOUcVPO/cVPOPcVPORcVPO2:scVmBdPcVmccVmUcVm/cVmPcVmRcVm2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847739, "uuid": "640ebcc9-85f1-44db-b918-d94cfa7e16e6", "value": 13529088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847739, "uuid": "df0b638a-68a0-4e32-a10d-a16a2a47cfdd", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccdc8410-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775847740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847740, "uuid": "536b61d6-9127-44ff-89fe-bf554627822b", "comment": "Malware payload (ConnectWise)", "value": "d9cd00972f1a15fec39036a70af6caf0", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847740, "uuid": "238a260a-98a1-4a54-96b4-71ee1fbd3016", "comment": "Malware payload (ConnectWise)", "value": "c41dd30689d6eb7c8c457e487355a37b73c748192323f69ea6af4ee579d5a3d2", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847740, "uuid": "4554617c-364e-4be6-9247-27f8c2779143", "value": "T18CA623116BF8D278F1F12A39D876A0B1A53A7D519E23C12E2324791E2C75EC0CA637", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847740, "uuid": "b943f536-0ea1-44f5-b0ad-5168f77e7127", "value": "196608:cHxcp9ym3nltDUJVyHxcp9ym3YHxcp9ym39Hxcp9ym32Hxcp9ym3:6GplpZGpmGpvGpEGp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847740, "uuid": "e3ac0413-06b2-44a3-a18d-815fcf04c290", "value": 9957376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847740, "uuid": "3eafe81c-f625-41c3-a24f-fb0158dc6706", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cced0c12-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775847740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847740, "uuid": "1daf2a34-f8e5-4c6b-97fd-1015f2e17ba1", "comment": "Malware payload (ConnectWise)", "value": "ebb0f4c0754beea08bbb13990b14826b", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847740, "uuid": "30c86052-b6dd-4551-8cb4-fe628686a796", "comment": "Malware payload (ConnectWise)", "value": "14294ffee4f09bff6d770b20c1a7876a4ce28d54e35f8b6cf65286982ee06782", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847740, "uuid": "c9bfc512-a017-415a-a610-f16f4615ffbe", "value": "T122D623116BF89668F0F26A35E876A0B1A5377D125E23D12E2324791E2C71EC0C9B37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847740, "uuid": "b37b207d-643e-4690-9b84-c16e4173e9a0", "value": "196608:RHxcp9ym3nltDUJVIHxcp9ym33Hxcp9ym3hHxcp9ym3kHxcp9ym3oEWHxcp9ym3Y:DGplpnGphGpTGpCGpbkGpblGpbf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847740, "uuid": "7e0f7e12-f9ec-4857-9a94-b6eb1c457633", "value": 13795328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847740, "uuid": "387e8b09-8c8d-47e3-acdb-b35c75d3dcc7", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd0efcf7-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775847740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847740, "uuid": "dc92d0b2-270f-47dc-8d09-5b89c90ec358", "comment": "Malware payload", "value": "c9db584a5e06d1735773c4fcf041dd7d", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847740, "uuid": "cf60d5e3-3b64-40a3-8770-c0ebf9958203", "comment": "Malware payload", "value": "907e327c0169f11e70b372faa0e09e835e9f9ac480797e40ec57be5b5623e89e", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847740, "uuid": "aca04f93-91a0-45f2-891a-22e6d688b269", "value": "T1F3D623116BF89278F1F22A39E876A071A5377C525E22D12E2324791E2C75EC0C9B37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847740, "uuid": "a9bb8cc6-c1a7-4713-808b-1920de8d3a07", "value": "196608:HHxcp9ym3nltDUJVnHxcp9ym33Hxcp9ym3hHxcp9ym3MHxcp9ym37Hxcp9ym3mH3:xGplpwGphGpTGpqGpFGp0GpM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847740, "uuid": "07b1f54f-3180-40e2-81d3-384a1e11d937", "value": 13524992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847740, "uuid": "1b508a98-7dbd-4c69-b71a-c29426dd2b14", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd0f0f34-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775847740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847740, "uuid": "5e434ee4-6601-4ff1-83a1-0e7650437a38", "comment": "Malware payload", "value": "914684df97d587c4f9acc9b3159c2788", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847740, "uuid": "33983b90-1813-4fd1-a63b-135cd99db7ae", "comment": "Malware payload", "value": "b1f5469f5f3505f603a8220be7eb213660ba684ce3949c0ea554ad361d9ebeb5", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847740, "uuid": "899d737f-0768-409f-b95b-3cb613c61ad7", "value": "T197D623116BF89278F0F22A35E876A0B1A5377D525E22D12E2324791E2C75EC0C9B37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847740, "uuid": "659b7eb9-ba84-466b-824f-1da078f7ca43", "value": "196608:HHxcp9ym3nltDUJVbHxcp9ym33Hxcp9ym3hHxcp9ym3VHxcp9ym3yHxcp9ym33HC:xGplpcGphGpTGpHGpAGphGph", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847740, "uuid": "1b15d5e5-c572-4130-9ce1-202fa79d3191", "value": 13414400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847740, "uuid": "4f9b9044-1dfa-4df3-a34a-f020ac40f414", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cdb6a0cd-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775847741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847741, "uuid": "023fd047-8447-4444-886f-e77f024dce7b", "comment": "Malware payload", "value": "ff9d99ffaf4fc43d05ceba7075295fdb", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847741, "uuid": "3c13332a-d026-4cc6-af29-75a4aed96051", "comment": "Malware payload", "value": "489cec1f7afd68b19be865f1a480457cd8c3cfee978b5bd145cc3eec0530b6d8", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847741, "uuid": "4704d921-7908-49ba-bf84-e517317d688a", "value": "T12FD623116BF89278F0F22A35E876A0B1A5377D525E22D12E2324791E2C75EC0C9B37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847741, "uuid": "1c07494e-05ec-4256-92bb-2ea2f0674124", "value": "196608:0Hxcp9ym3nltDUJVSHxcp9ym33Hxcp9ym3hHxcp9ym3VHxcp9ym3yHxcp9ym3QHx:SGplphGphGpTGpHGpAGp+Gpq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847741, "uuid": "d3a90c04-4014-443b-a59f-ef7cb63262fc", "value": 13414400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847741, "uuid": "b05c7759-da3f-49a1-93a8-41ee4e153371", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f47bcf8-3510-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775847851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847851, "uuid": "c01e8f5a-4852-4673-a006-6dbe3074a8ff", "comment": "Malware payload", "value": "e2366ea1e4a979d64bd4b11256d3ad5f", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847851, "uuid": "a923d722-7cc5-44ef-8bea-36e5fb0ad108", "comment": "Malware payload", "value": "e943b58112f58517b95424dba9334bf97c5dc2dd2f069dca04b9e75b9fec56ba", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847851, "uuid": "3ce46835-7ac5-4a80-b67f-ec8d413c52f6", "value": "T14E13E9E5FCA9D93031355638BACDD401FB670A3B055A3104719EAC187F3C799E1AAE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847851, "uuid": "cc10659e-9f30-4375-a401-c4706eb7b099", "value": "384:EcsKQ0VXvoQ2itS7s3RWA0m+EwvE4qN0MH8ns1irDy07Srgb6zakqpxYAVAK:EchQoio334qf8ns10DCx9Kn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847851, "uuid": "4bd137b3-104e-45fd-846e-ba5f05bce627", "value": 45289, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847851, "uuid": "e8450a67-0b65-45e1-aa8d-40c2297b6285", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12d56c82-3510-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775847857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847857, "uuid": "c6185039-dc58-4ef7-aa83-1daa4c9fca4a", "comment": "Malware payload", "value": "cabc624c1076f3dda4e56a6b44166e92", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847857, "uuid": "4ae23d11-50b9-421e-99b0-a77f3ed21b1d", "comment": "Malware payload", "value": "0b8078299654a12846e4967f1db3506409cfb8b1031687a910965d1a99c6f270", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847857, "uuid": "e13d9608-92b4-43e0-b3c3-127ef33aa8fb", "value": "T1B8D633FE4928F205C9FF46955B2C6E08E2D8DC6361C61D8D2B2D2DC2312BF47A891F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847857, "uuid": "185b53c9-b965-4c36-9a34-4ab0ca091a5d", "value": "393216:AvURin7HM0ou08/0C3R/Y5q/8a6ylnKxuMD:9RSwzuvv/2/hUKxl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775847857, "uuid": "fb65f721-d25c-48ec-a7e8-ea96db4e2556", "value": 13664556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847857, "uuid": "c382aa1f-7620-470f-b79f-7dcf0b65bd56", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14e8b107-3511-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775848290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775848290, "uuid": "f3c8c84c-2215-4f88-a6bc-98bda5a20955", "comment": "Malware payload", "value": "3988ac93e8e894b74de7794c93d3ff7d", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775848290, "uuid": "3a629363-6048-474b-9688-425e89335dd8", "comment": "Malware payload", "value": "fc6f8ae5f64e4f17481f7e3be29a1c56949f216a998414188003eae1db20c9e5", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775848290, "uuid": "147f1d3c-1537-4ecf-943d-b119a69f8b26", "value": "T1C7F533A69112DD877526B7E37FF70480A5891672008ED42789F46CFC66CE3CA6D9F2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775848290, "uuid": "70c97a43-c699-4606-9a70-c2b1a902c0c7", "value": "98304:fJmUq2XrJrxFzMo2bUa9FI/QGNSeeQorTHOIZdBXbgXoxn7EEPKdWcK:fJ3dp7Ao2HIoiSefo/HOyTXb/xn7hQK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775848290, "uuid": "d612e51a-285e-4afb-90fb-0fd03a1a11c3", "value": 3528264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775848290, "uuid": "fbdbbfec-e8c3-475e-bf1e-f12be053c460", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14b789b9-3515-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775850008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775850008, "uuid": "92e1d9dc-1b18-4ce3-a844-e87d595723e6", "comment": "Malware payload", "value": "dcf04df282f98a48203a51e9b79b4d46", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775850008, "uuid": "28441ed8-3b23-46c0-9e14-91dd445334ed", "comment": "Malware payload", "value": "716d698765e5bc3f936f7d28edc5b47839dfe8568a1311a57d2f8dbf73654b7c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775850008, "uuid": "adcb438c-fc02-4eab-ad49-4c4f677c5b24", "value": "T141C21949ABE806A2E8BF0B356D72468647B2F0866523C74F09CD948B1FF779049127", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775850008, "uuid": "1502a8b0-0a6b-4c1a-bb1a-4a0176ea2451", "value": "768:Y/0WS84xSf8JebY9c80FQr0BdpkvorjXego:Y/0nxGb85m9rjOj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775850008, "uuid": "860f6b73-77c2-4cb0-9af0-adec35e4b69c", "value": 27648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775850008, "uuid": "ddda1f04-7a65-4bf1-8242-658c670e51af", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f65f0bf-3515-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775850079, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775850079, "uuid": "3c1d43f7-f146-4f6c-8c15-8b04c275be7c", "comment": "Malware payload", "value": "b12548ff19e02d202234e8f6303498b7", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775850079, "uuid": "cd8a7bae-819e-4520-8247-28e06deef723", "comment": "Malware payload", "value": "3bddde9f5f31a9605b82be96c244b63a9c59863f4c1c881e73fecd1f60eadcd3", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775850079, "uuid": "c53f86af-e9e4-4c93-9e77-ab582a9e08d5", "value": "T19BF69E6BF2A900E8D5BBD0B8C6476227F7717815537097CF16A057AA1F23BE09A3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775850079, "uuid": "d69b88cd-3bef-439a-866e-3c9fb42d12aa", "value": "376e8424dc569aef177358986a829681", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775850079, "uuid": "1086e932-7f9b-4397-9b14-d93d8cc332ca", "value": "196608:aTI+Z34GrArs1Ya6BZTCJlDJ2YBknOCfa5XrqtCl0wvr:a07rs1Ya6BZUD5inOCfOrqolXvr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775850079, "uuid": "664dbf20-5ccc-4a20-ba03-f9dea836f8bc", "value": 15702182, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775850079, "uuid": "2f96ccc9-0e84-4b86-8bcc-34d1fc2da2be", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16d88243-3516-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775850441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775850441, "uuid": "f33f7a21-349c-4f42-8626-3952f36b356d", "comment": "Malware payload", "value": "bfd2826f7a7524de2bc26337d57d02c6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775850441, "uuid": "a8c44a7c-ffb5-4d8d-8c05-c3c89e2baa9d", "comment": "Malware payload", "value": "36a0705e9dfd614536f15a1e0c2311cfd26dabf0ad5323afbeefc911bc73089e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775850441, "uuid": "c638bd69-9955-4e36-8d95-b1754acb22e6", "value": "T1FC53E8A0C16840BF6A1F9B58F594B304F1C45946DB01EFD27AF4C1A8EBC9F9918B77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775850441, "uuid": "dd3ea054-a825-40fb-a5f2-771da469e52e", "value": "768:q8UgIhQfZdapQyG9ypae4fYzvuQkenSJ6I2W/+V+ejFBBTy0Z:q7QHap+YvuQkenST/+V+ejFBBTy0Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775850441, "uuid": "04a71f30-9f3f-400c-9bbd-b0e3c3ee34f4", "value": 65519, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775850441, "uuid": "847692e8-e528-4564-befa-7cf8662844f7", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5c6738f-3520-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775855056, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775855056, "uuid": "8a7e2da6-5fed-456d-aba5-455693812b3d", "comment": "Malware payload (ConnectWise)", "value": "c1a6adc81a3ab214d1553179db1120c6", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775855056, "uuid": "1f3c9dba-fafb-4402-9729-410601f5283f", "comment": "Malware payload (ConnectWise)", "value": "a038efc2f02a66df78b90d2263b74601c26cb26d3df5dc90f5cfac7eb9ee25ee", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775855056, "uuid": "c405031c-7fec-483c-8c6d-7876fb2e6b47", "value": "T1E9D6233267FD0918E1F36778ED3991E291367CA59F12D08F2610786E6871E8097A37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775855056, "uuid": "2a4f988c-e03a-46e6-8723-d88c92ae8a9d", "value": "196608:ZrnLYG3zuhukOMrnLYG3zmrnLYG3zcrnLYG3zVrnLYG3zWrnLYG3zSrnLYG3zP:ZbDDugvMbDDmbDDcbDDVbDDWbDDSbDDP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775855056, "uuid": "83eb53b2-7b87-4acf-aa83-ce265115ab7c", "value": 13533184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775855056, "uuid": "5b852d84-8522-4a85-a794-6e69856d14f6", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2843d226-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775859820, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775859820, "uuid": "244bc225-8645-45b0-9048-61f366b20bda", "comment": "Malware payload", "value": "5ea3839ef4effebf0c57e18742d1d284", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775859820, "uuid": "d217b5fc-0246-46e6-a2bf-5da35bbb9100", "comment": "Malware payload", "value": "64d671e954c370655d61855ba22381f9bbd929ac713322765686619cebeac480", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775859820, "uuid": "96314995-1d02-430e-999b-d236dc2b185f", "value": "5A831229135414EAD62681F1D3FD1F84AD591F69CEE2EC157C12BC99EE333AD2CC2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775859820, "uuid": "89c9d8c4-b806-47ac-82e4-f0f7c52833f6", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uo:yYI0ARqw1qAEv7UIFM8oJorFquyjkRke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775859820, "uuid": "5f3e3186-0483-4a1b-b97e-74021d3be826", "value": 83984, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775779239, "uuid": "4efbdb1c-3470-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.135.147:57431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775779458, "uuid": "d1ff7dcd-3470-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.211.8.28:51097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775779510, "uuid": "f0e69bcd-3470-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pqxyg.selflessrowdy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775779627, "uuid": "36629b8d-3471-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.124.121:55488/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775779813, "uuid": "a5354624-3471-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://serforgea.selflessrowdy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775779993, "uuid": "10bff359-3472-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.135.147:57431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775780170, "uuid": "7a654ebb-3472-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ew59tugm.selflessrowdy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775780236, "uuid": "a1c1551a-3472-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.253.4:54201/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775780532, "uuid": "51c4b0d7-3473-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://price-basic.selflessrowdy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775780535, "uuid": "53ca8f8e-3473-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.253.4:54201/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775780661, "uuid": "9ec821e2-3473-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.183.165.146:41705/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775780888, "uuid": "26226286-3474-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://genomedeco.selflessrowdy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775781131, "uuid": "b6ba27dd-3474-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://inkcoo.selflessrowdy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775781258, "uuid": "02d2b0c1-3475-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.211.8.28:51097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775781547, "uuid": "af0d7f2a-3475-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ambe8-trace.buildingstab.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775781850, "uuid": "63a0469d-3476-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kb0xbi23.buildingstab.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775782027, "uuid": "ccf62904-3476-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.15.58:48671/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775782208, "uuid": "3899bf46-3477-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sol-lithum.buildingstab.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775782220, "uuid": "40158669-3477-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.183.165.146:41705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775782341, "uuid": "87dda196-3477-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.101/Makefile", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775782448, "uuid": "c7bec521-3477-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trispire1ar.buildingstab.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775782867, "uuid": "c182b523-3478-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ancientpipeline.buildingstab.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775783169, "uuid": "75d443e6-3479-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tencreek.buildingstab.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775783304, "uuid": "c661887b-3479-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.191.143:42362/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775783890, "uuid": "23461030-347b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wild-api.firstbeasts.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775784068, "uuid": "8d9c0ce3-347b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://track-node.firstbeasts.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775784427, "uuid": "639954a4-347c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://beast-vault.firstbeasts.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775784729, "uuid": "17be6d63-347d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alpha-svc.firstbeasts.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775784977, "uuid": "ab9b1a5f-347d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://90.251.127.200:49949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775785152, "uuid": "13cdbe79-347e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pack-hub.firstbeasts.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775785449, "uuid": "c47b68e5-347e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate-node.firstbeasts.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775785570, "uuid": "0cd8d0f0-347f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.191.143:42362/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775785748, "uuid": "76a60a17-347f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://story-api.hisslytori.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775786112, "uuid": "4f94056a-3480-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tale-node.hisslytori.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775786297, "uuid": "be2f5f18-3480-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://90.251.127.200:49949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775786467, "uuid": "237bb64e-3481-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://page-vault.hisslytori.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775786769, "uuid": "d76082b5-3481-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/gold.exe", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775786771, "uuid": "d8b62602-3481-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://text-svc.hisslytori.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775786837, "uuid": "fff0c9d6-3481-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.164.130.55/O.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775787127, "uuid": "aca52f74-3482-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://book-hub.hisslytori.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775787378, "uuid": "429dc994-3483-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.127.44:40062/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775787487, "uuid": "8367dcb1-3483-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://read-gate.hisslytori.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775787789, "uuid": "379dc50a-3484-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://team-api.athleticscrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775787979, "uuid": "a8c09deb-3484-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.54.216:60744/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775788149, "uuid": "0e049579-3485-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://crew-node.athleticscrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775788327, "uuid": "77d18912-3485-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.107.58:44279/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775788447, "uuid": "bfba05f7-3485-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sport-vault.athleticscrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775788520, "uuid": "eb1a347d-3485-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.5.94:46851/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775788651, "uuid": "3956f9cf-3486-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.48.204:52051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775788810, "uuid": "982917ea-3486-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://run-svc.athleticscrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775788935, "uuid": "e29034c9-3486-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.209.254.248:45662/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789060, "uuid": "2ce30725-3487-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.127.44:40062/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789172, "uuid": "6fa942c2-3487-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://club-hub.athleticscrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789227, "uuid": "90401404-3487-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.107.58:44279/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789295, "uuid": "b8c38017-3487-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.30.142.2:38824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789532, "uuid": "46607e7e-3488-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-gate.athleticscrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789828, "uuid": "f6f41d0b-3488-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talk-api.symposiumwash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "1d6995db-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.164.130.55/Clipz.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "1d70ab42-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.164.130.55/Clipz.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "1d70bc93-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.164.130.55/Clipz.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "1d71248f-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.164.130.55/Clipz.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "1d76a427-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.164.130.55/Clipz.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "1d770059-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.164.130.55/Clipz.ppc-440fp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "1d7bc170-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.164.130.55/Clipz.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "1d7be274-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.164.130.55/Clipz.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "1d7f0ed9-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.164.130.55/Clipz.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "1d7f13f8-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.164.130.55/Clipz.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "1d7f3813-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.164.130.55/Clipz.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "1d836e3d-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.164.130.55/Clipz.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "1d838ff3-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.164.130.55/Clipz.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "1d88efd5-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.164.130.55/Clipz.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789893, "uuid": "1d890017-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.164.130.55/Clipz.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775789957, "uuid": "4356aded-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.164.130.55/Clipz.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775790020, "uuid": "69380819-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775790020, "uuid": "69380996-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775790187, "uuid": "cca0e2ab-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://event-node.symposiumwash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775790246, "uuid": "f01380c9-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.5.94:46851/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775790261, "uuid": "f8904ec9-3489-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.68.96:39370/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775790441, "uuid": "643b903d-348a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.114.23:44897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775790489, "uuid": "807bb2a4-348a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wash-vault.symposiumwash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775790739, "uuid": "15a98961-348b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.209.254.248:45662/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775790787, "uuid": "3281a789-348b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clean-svc.symposiumwash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775791212, "uuid": "2fdbb692-348c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://site-hub.symposiumwash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775791452, "uuid": "be959f5d-348c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.222.153:35159/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775791568, "uuid": "03b0c9d6-348d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://link-gate.symposiumwash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775791813, "uuid": "9602ba96-348d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.156.90.30:45109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775791867, "uuid": "b5e3cc42-348d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://art-api.choreograpshrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775792115, "uuid": "4a126457-348e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.234.253:39317/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775792118, "uuid": "4bae59b3-348e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.202.183.48:43250/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775792416, "uuid": "fd5d9c51-348e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/jew.x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775792468, "uuid": "1c0f9ecb-348f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://step-node.choreograpshrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775792485, "uuid": "26aa3b31-348f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.57.222:55074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775792589, "uuid": "64972bf6-348f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dance-vault.choreograpshrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775792828, "uuid": "f31c8f56-348f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.151.154:45258/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775792890, "uuid": "17d8947e-3490-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shrew-svc.choreograpshrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775793254, "uuid": "f0dee926-3490-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://unit-hub.choreograpshrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775793493, "uuid": "7f6b546e-3491-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate-svc.choreograpshrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775793503, "uuid": "84fbb895-3491-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.179.138:57330/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775793686, "uuid": "f20cb01e-3491-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.115.234:52061/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775793847, "uuid": "5288c9fc-3492-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mind-api.obsessivescum.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775794096, "uuid": "e6996a37-3492-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.170.143:33252/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775794097, "uuid": "e72a16aa-3492-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.89.2:46272/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775794153, "uuid": "08e7fd05-3493-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://focus-node.obsessivescum.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775794284, "uuid": "56e0ffc2-3493-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.145.88:40963/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775794569, "uuid": "0075e037-3494-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scum-vault.obsessivescum.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775794580, "uuid": "073160f2-3494-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.3.240:45000/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775794650, "uuid": "30dc76c3-3494-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.2.167:43556/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775794873, "uuid": "b60878db-3494-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://task-svc.obsessivescum.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775794942, "uuid": "df0d32f1-3494-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.221.54:40260/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775795295, "uuid": "b1638095-3495-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://site-hub.obsessivescum.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775795360, "uuid": "d7fa13b0-3495-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.53.111.132:46052/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775795541, "uuid": "440cf95b-3496-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.170.143:33252/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775795591, "uuid": "61f1c6d1-3496-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://root-gate.obsessivescum.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775795778, "uuid": "d11475da-3496-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.89.2:46272/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775795779, "uuid": "d1b9c4f6-3496-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.91.133:50681/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775795827, "uuid": "ee371137-3496-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.151.154:45258/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775795832, "uuid": "f1704286-3496-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stay-api.againstvisitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775796078, "uuid": "8402b3f4-3497-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.166.218:53675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775796253, "uuid": "ec87c23b-3497-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://guest-node.againstvisitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775796793, "uuid": "2e1ad58f-3499-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://visit-vault.againstvisitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775796972, "uuid": "990e8f3c-3499-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://safe-svc.againstvisitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775797028, "uuid": "ba6b3491-3499-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.213.101:51421/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775797099, "uuid": "e46154e6-3499-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.53.111.132:46052/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775797215, "uuid": "29bf5fda-349a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://host-hub.againstvisitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775797418, "uuid": "a2ec925e-349a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.255.209.142:43329/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775797515, "uuid": "dc5adf83-349a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate-api.againstvisitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775797532, "uuid": "e66e07ee-349a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.160.182:44053/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775797933, "uuid": "d57e1d30-349b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://food-api.pampushkatimp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775798184, "uuid": "6b2583a2-349c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.179.0:55199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775798234, "uuid": "8901a004-349c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cook-node.pampushkatimp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775798589, "uuid": "5c96ede9-349d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://timp-vault.pampushkatimp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775798783, "uuid": "d04ae62d-349d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.221.54:40260/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775799024, "uuid": "5fb229ac-349e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.191.182.209:57195/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775799128, "uuid": "9dfc9d99-349e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.229.66:49082/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775799140, "uuid": "a55a77d4-349e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pamp-svc.pampushkatimp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775799372, "uuid": "2f9ea142-349f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://menu-hub.pampushkatimp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775799552, "uuid": "9ad3e966-349f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate-node.pampushkatimp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775799679, "uuid": "e68edf34-349f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.179.0:55199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775799913, "uuid": "71b7800b-34a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://set-api.honeupwar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775800095, "uuid": "de68f782-34a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.255.209.142:43329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775800269, "uuid": "46133983-34a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://war-node.honeupwar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775800569, "uuid": "f8eb24e5-34a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://up-vault.honeupwar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775800758, "uuid": "69b8580c-34a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.191.182.209:57195/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775800929, "uuid": "cf7de92f-34a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hone-svc.honeupwar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775801292, "uuid": "a7eb7e24-34a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub-relay.honeupwar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775801656, "uuid": "80808a69-34a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate-check.honeupwar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775801958, "uuid": "34e33830-34a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.248.140:38035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775802127, "uuid": "99722cf9-34a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.65.244.250:52606/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775802128, "uuid": "9a180a76-34a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.118.112:49622/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775802191, "uuid": "bf9605d4-34a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://aura-api.aurasamodians.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775802254, "uuid": "e4ec8a37-34a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.66.32.186:51237/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775802427, "uuid": "4c4d7fed-34a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.230.50:60113/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775802431, "uuid": "4e8333c1-34a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sam-node.aurasamodians.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775802439, "uuid": "537a8e9d-34a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.39.179:52857/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775802548, "uuid": "9431f092-34a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.242.0.41:41347/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775802614, "uuid": "bbc6e334-34a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://light-vault.aurasamodians.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775802624, "uuid": "c1d1948e-34a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.160.182:44053/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775802967, "uuid": "8e0d3c3b-34a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://star-svc.aurasamodians.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775803029, "uuid": "b34bbc65-34a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.226.225.157:58901/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775803271, "uuid": "435fb281-34a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sky-hub.aurasamodians.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775803457, "uuid": "b24bfbef-34a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.28.252:33856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775803519, "uuid": "d6ff5148-34a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.39.179:52857/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775803573, "uuid": "f71c8e2c-34a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.158.212.205:54405/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775803627, "uuid": "17b40a86-34a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.230.50:60113/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775803628, "uuid": "1815794a-34a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://root-gate.aurasamodians.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775803929, "uuid": "cb715da4-34a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sgqh.firstbeasts.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775804060, "uuid": "1983e949-34aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://154.242.0.41:41347/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775804347, "uuid": "c4ba2346-34aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lichensparrow.firstbeasts.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775804588, "uuid": "54a1bba9-34ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.192.169:46787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775804592, "uuid": "57012ad4-34ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sdkpasture.firstbeasts.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775804709, "uuid": "9cb65d1b-34ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.28.252:33856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775805013, "uuid": "51822e50-34ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://velcoreal.hisslytori.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775805311, "uuid": "035a738c-34ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunopen.hisslytori.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775805560, "uuid": "97961194-34ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.218.190:49735/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775805616, "uuid": "b8f1f7d7-34ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://p4cket-stack.hisslytori.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775805622, "uuid": "bc91ce0e-34ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.255.251.198:55895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775805726, "uuid": "fae7ffbd-34ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.203.28:38061/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775805908, "uuid": "670074ec-34ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://securesocket.athleticscrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775805978, "uuid": "9119ff22-34ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.107.203:44292/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775805979, "uuid": "91c1ce74-34ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.89.252.178:52003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775806326, "uuid": "60652be7-34af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.109.243:49253/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775806326, "uuid": "607dbafd-34af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.109.243:49253/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775806567, "uuid": "efed2b03-34af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://falc0n0-phase.athleticscrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775806587, "uuid": "fbe5119e-34af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.113.247.136:40649/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775806749, "uuid": "5cb9d298-34b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dzgcdhze.athleticscrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775806874, "uuid": "a7140538-34b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/6nyoswt3ky", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775806927, "uuid": "c6a218cb-34b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mixech.symposiumwash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775807120, "uuid": "396801dd-34b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.30.27:49989/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775807287, "uuid": "9d420747-34b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://msez.symposiumwash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775807478, "uuid": "0f2517bb-34b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.136.170:43884/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775807653, "uuid": "7732c7e6-34b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hubsyntax.symposiumwash.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775807657, "uuid": "79b4a8a7-34b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.107.203:44292/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775807657, "uuid": "79b90b47-34b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.25:54436/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775807827, "uuid": "dec96488-34b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.187.43:41421/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775808010, "uuid": "4c43cca2-34b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vorvale7um.choreograpshrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775808197, "uuid": "bb6f8bbf-34b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.67.4:44451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775808250, "uuid": "db58078e-34b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.116.76:50468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775808367, "uuid": "20ff4f47-34b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://campaigndecode.choreograpshrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775808668, "uuid": "d4256a49-34b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fressolar.choreograpshrew.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775809034, "uuid": "ae2acf01-34b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-so11d.obsessivescum.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775809098, "uuid": "d4a9b658-34b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.136.170:43884/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775809267, "uuid": "39720c05-34b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sparkecho.obsessivescum.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775809326, "uuid": "5cba9262-34b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.187.43:41421/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775809629, "uuid": "1143549e-34b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://factoryserver.obsessivescum.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775809819, "uuid": "8282408d-34b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.30.27:49989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775810051, "uuid": "0cac1419-34b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://expor-sor.againstvisitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775810113, "uuid": "314115ab-34b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.67.4:44451/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775810355, "uuid": "c1e56571-34b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://extendplain.againstvisitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775810541, "uuid": "30713ae2-34b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.231.183.50:42511/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775810659, "uuid": "76fa04bf-34b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.241.15:36989/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775810713, "uuid": "9704bf19-34b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gr1m2-vault.againstvisitor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775811007, "uuid": "466fed04-34ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rhexjd.pampushkatimp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775811370, "uuid": "1ede066d-34bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meadow-bro.pampushkatimp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775811674, "uuid": "d3bd2f30-34bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jv0nel9.pampushkatimp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775811967, "uuid": "829aafab-34bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rapivelv.honeupwar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775812038, "uuid": "ad10bd0a-34bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.241.15:36989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775812214, "uuid": "1612dc75-34bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.126.166:53120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775812395, "uuid": "81ce39e7-34bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scenevivid.honeupwar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775812511, "uuid": "c6cee4e8-34bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.151.156.198:57421/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775812690, "uuid": "3147de11-34be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dense3-trail.honeupwar.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775812928, "uuid": "bf29725c-34be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.218.118:35172/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775813051, "uuid": "08df60cc-34bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pbpx.aurasamodians.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775813227, "uuid": "7171d86e-34bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.75.76:47445/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775813354, "uuid": "bd7bc9ab-34bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nordraa8.aurasamodians.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775813708, "uuid": "90380303-34c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qy55tnaq.aurasamodians.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775814139, "uuid": "912b2571-34c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.151.156.198:57421/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775816179, "uuid": "5141e7d9-34c6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ouya691.xynotrax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775816226, "uuid": "6d50a7fc-34c6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.215.173.87:54797/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775816526, "uuid": "202bdec2-34c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.215.173.87:54797/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775816537, "uuid": "268dad40-34c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sudden-lab.xynotrax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775816830, "uuid": "d524b4e8-34c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mark-roo.xynotrax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817195, "uuid": "ae91e20d-34c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.6.161:59854/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817252, "uuid": "d0ac3821-34c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://autu-grid.xynotrax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817427, "uuid": "3938ea15-34c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.174.69:47311/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817554, "uuid": "84f73f7b-34c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://guardfierce.xynotrax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "a7dbaaab-34c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/jew.arm", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "a7dc7ff1-34c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/jew.arm5", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "a7e14231-34c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/jew.sh4", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "a7e1f7a1-34c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/jew.m68k", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "a7e8504d-34c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/jew.spc", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "a7ec858d-34c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/jew.arm7", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "a7fa1280-34c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/jew.mpsl", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "a8063011-34c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/jew.ppc", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817613, "uuid": "a811a0a0-34c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/jew.mips", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817674, "uuid": "cc101318-34c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/bins/jew.arm6", "Tag": [ { "name": "176-65-139-25", "colour": "#7645b7", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775817915, "uuid": "5bdd8454-34ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alignsort.xynotrax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775818158, "uuid": "ecc67336-34ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.88.7.48:34063/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775818267, "uuid": "2db27162-34cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sync6-signal.velqo7rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775818515, "uuid": "c14f35e6-34cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-3xpo.velqo7rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775818875, "uuid": "97f3507c-34cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://01bdp.velqo7rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775819233, "uuid": "6d6d8a66-34cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://daevia.velqo7rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775819471, "uuid": "fb3442dc-34cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://0izjx27i.velqo7rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775819592, "uuid": "43629522-34ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.88.7.48:34063/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775819707, "uuid": "880020a2-34ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/376289280/zZdnqAK.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775819781, "uuid": "b41d0604-34ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.224.243:33035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775819889, "uuid": "f4be80c2-34ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://celllaunch.velqo7rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775820199, "uuid": "ad2fd82c-34cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talvenos2.stravexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775820488, "uuid": "59625298-34d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://869n.stravexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775820853, "uuid": "32d46c24-34d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-hyp3r.stravexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821152, "uuid": "e5003e47-34d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cleanbind.stravexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821158, "uuid": "e8def5ed-34d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.224.243:33035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821574, "uuid": "e0c12753-34d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wtnbx.stravexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821580, "uuid": "e4540f2c-34d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.206.160:43384/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821580, "uuid": "e46869a3-34d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.32.252:60171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821869, "uuid": "90c3684f-34d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jxoov.stravexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "96298491-34d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.129/bins/pmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "962af5ca-34d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.129/bins/parm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "962afca9-34d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.129/bins/pm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "962b085c-34d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.129/bins/px86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "96359d51-34d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.129/bins/psh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "9637cfa7-34d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.129/bins/pspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "96396aca-34d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.129/bins/parm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "96438de3-34d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.129/bins/parm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775821878, "uuid": "964f11df-34d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.129/bins/parm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775822227, "uuid": "65d90a1c-34d4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.174.69:47311/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775822229, "uuid": "67488ab9-34d4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xmkzarzz.qorvy3nal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775822357, "uuid": "b3793cc3-34d4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.165.4:38905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775822594, "uuid": "40f8f316-34d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://7mic.qorvy3nal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775822889, "uuid": "f0bc6d9a-34d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://videovit.qorvy3nal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775822957, "uuid": "18e19541-34d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.32.252:60171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775823253, "uuid": "c9b0e935-34d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trai0-plate.qorvy3nal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775823428, "uuid": "32043b98-34d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vaultwagon.qorvy3nal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775823558, "uuid": "7f179ed0-34d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.165.4:38905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775823855, "uuid": "309a878a-34d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkfluxal.qorvy3nal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775823912, "uuid": "52858e49-34d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.98.237:51262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775824087, "uuid": "bab552f5-34d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sub-ch3c.drimoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775824508, "uuid": "b55828c5-34d9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dyncresten9.drimoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775824811, "uuid": "69f3b137-34da-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://slatedraft.drimoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775825175, "uuid": "4321afee-34db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://equitytorre.drimoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775825359, "uuid": "b0c596dd-34db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.236.74.65:58704/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775825471, "uuid": "f3dcc9b5-34db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xgi87u.drimoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775825769, "uuid": "a52c2589-34dc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xpprcq.drimoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775826130, "uuid": "7c1ebe2e-34dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trans-vocal.plix9anor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775826489, "uuid": "52870a03-34de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lum-tidear.plix9anor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775826496, "uuid": "56bf1651-34de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.134.11:41117/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775826554, "uuid": "78ec49d9-34de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.168.199:45770/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775826846, "uuid": "276e26a4-34df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://v31vet0-sheet.plix9anor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775827027, "uuid": "932957c0-34df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.228.171:58708/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775827094, "uuid": "bac7fa0f-34df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.236.74.65:58704/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775827206, "uuid": "fe056d9e-34df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://4zure-hold.plix9anor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775827452, "uuid": "90af609d-34e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neuralvau.plix9anor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775827458, "uuid": "9431fa6c-34e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.98.237:51262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775827872, "uuid": "8aa2068c-34e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tradesyn.plix9anor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775827927, "uuid": "abbc78b6-34e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.94.31.231:56330/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775828108, "uuid": "17392b20-34e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/kk.exe", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775828173, "uuid": "3e45796c-34e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://velvale7on.vortaqen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775828299, "uuid": "8910328d-34e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.134.11:41117/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775828526, "uuid": "10b46819-34e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://q6ivtu.vortaqen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775828832, "uuid": "c6b42053-34e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://80ycuu.vortaqen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775829195, "uuid": "9f4ab4a1-34e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://norforge2ar.vortaqen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775829426, "uuid": "292d78b6-34e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.79.44:50610/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775829492, "uuid": "502834d0-34e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geysermars.vortaqen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775829620, "uuid": "9cc8e142-34e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.178.183:47003/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775829790, "uuid": "01a6d158-34e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.2:52946/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775829907, "uuid": "479dfcad-34e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/1401316133/joG1SDT.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775829916, "uuid": "4d212d04-34e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ultglyp.vortaqen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775830387, "uuid": "658677b3-34e7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ngwq.kyno4rexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775830690, "uuid": "1a654a34-34e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://equity-colum.kyno4rexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775831227, "uuid": "5a3b93aa-34e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.128.202:42634/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775831232, "uuid": "5d38d228-34e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumvalea.kyno4rexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775831236, "uuid": "5ffd039c-34e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.178.183:47003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775831237, "uuid": "603be955-34e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.103.29:58979/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775831414, "uuid": "ca0ccae1-34e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://st4bi-spool.kyno4rexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775831647, "uuid": "54e612b2-34ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://d1sc4-wave.kyno4rexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775832015, "uuid": "30557386-34eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://metri-oak.kyno4rexil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775832017, "uuid": "311102f9-34eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.104.65:54173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775832078, "uuid": "558dc8c2-34eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.166.218:53675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775832078, "uuid": "55bd7db6-34eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.7.48:36353/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775832375, "uuid": "06737c39-34ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://composerefine.zeltorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775832606, "uuid": "90a07ceb-34ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7640890992/DHiKU6L.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775832676, "uuid": "ba196ba5-34ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.23.145:48269/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775832734, "uuid": "dc96ecd9-34ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://p4rtn0-forge.zeltorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775832970, "uuid": "69496197-34ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://289rabl.zeltorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775833155, "uuid": "d7a52fe9-34ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.103.29:58979/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775833333, "uuid": "41e73906-34ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://decodebran.zeltorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775833521, "uuid": "b20115bc-34ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.164.29.156:58869/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775833688, "uuid": "154f458d-34ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hsp96wn.zeltorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775833990, "uuid": "c9230904-34ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://iktol.zeltorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775834057, "uuid": "f11bc0eb-34ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.104.65:54173/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775834227, "uuid": "56c88440-34f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.166:56230/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775834234, "uuid": "5ae8556b-34f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.23.145:48269/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775834349, "uuid": "9f18da93-34f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://porter.bravo1nixu.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775834650, "uuid": "52deab00-34f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynvenor.bravo1nixu.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775834660, "uuid": "58aafcca-34f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.126.185:58896/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775834661, "uuid": "592266bf-34f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.252.161:55541/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835007, "uuid": "27697eb6-34f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vi5u4l-branch.bravo1nixu.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835021, "uuid": "2fbb6124-34f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.230.72:51959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835070, "uuid": "4d42a929-34f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.230.72:51959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835070, "uuid": "4d458c2d-34f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.164.29.156:58869/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835070, "uuid": "4d56ba5e-34f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.27.52:34429/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835311, "uuid": "dc9f6d19-34f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.126.185:58896/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835426, "uuid": "2121400a-34f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.166:56230/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835489, "uuid": "46b9603c-34f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.105/rebirth.arm7", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835489, "uuid": "46bacd9e-34f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.105/rebirth.arm5", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835489, "uuid": "46c7d5e7-34f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.105/rebirth.mpsl", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835489, "uuid": "46cf6dc0-34f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.105/rebirth.arm", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835492, "uuid": "4863882a-34f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.105/rebirth.arm6", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835555, "uuid": "6e18e2d7-34f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.105/rebirth.mips", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835615, "uuid": "91a4cce9-34f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fleestrict.bravo1nixu.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775835847, "uuid": "1c1630e4-34f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://valley-con.bravo1nixu.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775836027, "uuid": "876a9dc0-34f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.12.58:35723/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775836027, "uuid": "877bea41-34f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ligfleet.bravo1nixu.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775836220, "uuid": "fac489c5-34f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.228.26:43318/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775836338, "uuid": "4098e33b-34f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.27.52:34429/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775836638, "uuid": "f3adf8a8-34f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://851xsk.erectreset.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775836819, "uuid": "5fb95429-34f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://updv1.erectreset.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775837172, "uuid": "31e6b6a2-34f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zenvaleex.erectreset.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775837186, "uuid": "3a3628d7-34f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.166.84:59922/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775837540, "uuid": "0d1b096e-34f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://importsnow.erectreset.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775837837, "uuid": "be5a2523-34f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://serven0ix.erectreset.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775838194, "uuid": "934f4980-34f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rh0zttub.erectreset.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775838500, "uuid": "49759711-34fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lab3l-node.fineon1y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775838847, "uuid": "189d2ad7-34fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://primpartn.fineon1y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775838865, "uuid": "234cb1d4-34fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.119.192:43772/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775839217, "uuid": "f50649b5-34fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper-5i1ver.fineon1y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775839764, "uuid": "3b0765f9-34fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.236.99:55276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775840226, "uuid": "4e4f4123-34fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.66.210:49543/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775840540, "uuid": "092cac06-34ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.119.192:43772/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775840898, "uuid": "defa051a-34ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sercrestos9.fineon1y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775841129, "uuid": "686fffd9-3500-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.163.91:48234/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775841254, "uuid": "b2d757ba-3500-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clear-hinge.fineon1y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775841377, "uuid": "fc30f7bd-3500-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.236.99:55276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775841559, "uuid": "68fbf13d-3501-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.68.168.193:45872/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775841612, "uuid": "88616225-3501-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://freightdynam.faultmincin8.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775841735, "uuid": "d17ad456-3501-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.241.198:37586/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775841852, "uuid": "176e00b8-3502-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://j84f4g0p.quantumharbinger.digital/?=check&&actmn=hLFCadDSZIRfXDrK", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775841859, "uuid": "1ba0b4b1-3502-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.226.53:49648/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775841920, "uuid": "3fe3deac-3502-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://passivedusk.faultmincin8.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775842269, "uuid": "0ffbc9c2-3503-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://b4rk-craft.faultmincin8.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775842632, "uuid": "e85e14e8-3503-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.87.163:46674/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775842634, "uuid": "e99a211f-3503-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://0hyb.faultmincin8.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775842927, "uuid": "97f1ff1d-3504-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.66.210:49543/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775842936, "uuid": "9dd5c46d-3504-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://suyjbrc.faultmincin8.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775843290, "uuid": "70663b9d-3505-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5csau02h.faultmincin8.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775843592, "uuid": "249105f5-3506-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://impo-casc.airportbude.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775843890, "uuid": "d5f55953-3506-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://formatmeas.airportbude.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775844211, "uuid": "95908fdc-3507-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.178.187:57547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775844315, "uuid": "d39d0f10-3507-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://loosematrix.airportbude.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775844427, "uuid": "16664f11-3508-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.49.65:54893/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775844610, "uuid": "833007c6-3508-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yssym17.airportbude.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775844726, "uuid": "c83dbc43-3508-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.158.1:51186/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775844726, "uuid": "c8a32662-3508-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.227.40:57085/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775844927, "uuid": "40169334-3509-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.166.231.98:41528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845086, "uuid": "9ef7dc17-3509-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.249.10.200/hRRdnXoFrVemzG85.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845096, "uuid": "a50060d3-3509-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.241.198:37586/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845146, "uuid": "c2c6c33f-3509-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.249.10.200/zpubeYnbswoZNHK172.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845146, "uuid": "c2feb255-3509-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.249.10.200/KxxysbztQp98.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845146, "uuid": "c31d793f-3509-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.249.10.200/uWSHeXISRSNrlvjgYdTuuuuAkQR204.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845207, "uuid": "e750c433-3509-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/clpr.exe", "Tag": [ { "name": "282234", "colour": "#44be85", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845212, "uuid": "ea3a92e7-3509-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ultra-gr4nit.airportbude.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845280, "uuid": "12857f12-350a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.94.31.231:56330/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845450, "uuid": "784d2db5-350a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://reef-drive.airportbude.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845624, "uuid": "dfe1e7fc-350a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7742504508/3nUJ75T.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845629, "uuid": "e2d65776-350a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-5udd.canone7node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845812, "uuid": "4fa27aed-350b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.178.187:57547/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775845988, "uuid": "b8f35204-350b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ubped.canone7node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775846226, "uuid": "46741276-350c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.227.40:57085/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775846226, "uuid": "46d45643-350c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.12.65:55732/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775846230, "uuid": "48c785fe-350c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.160.182:53130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775846287, "uuid": "6ac8d61e-350c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soundencode.canone7node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775846590, "uuid": "1f6aec73-350d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solcoreal5.canone7node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775846596, "uuid": "22d55ba6-350d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.98.66:48539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775846712, "uuid": "684cceeb-350d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.80.127:52757/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775846839, "uuid": "b3cae0d2-350d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.27.195:57775/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775846888, "uuid": "d13b1ca3-350d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.120.17:47595/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847013, "uuid": "1bba83d1-350e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://asset5-track.canone7node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847126, "uuid": "5ecda9c1-350e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.68.153:33929/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847309, "uuid": "cc53ef79-350e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://60moi.canone7node.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847551, "uuid": "5c77525f-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.230.148.181:40958/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847552, "uuid": "5d0d0d13-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.131.185:36372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847732, "uuid": "c80061e9-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.29/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847732, "uuid": "c80d9400-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.32.80:8040/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847733, "uuid": "c8f6fc41-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.32/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847734, "uuid": "c92023ae-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.41/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847734, "uuid": "c9213183-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://104.249.10.37/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847734, "uuid": "c92963ab-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.74/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847734, "uuid": "c97e5129-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.32.80:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847738, "uuid": "cbee8365-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.32.74:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847738, "uuid": "cbf5670b-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.74/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847739, "uuid": "cc1899ae-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.32.74:8040/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847739, "uuid": "cc2b8f8d-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.12/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847739, "uuid": "cc2d4211-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.29/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847739, "uuid": "cc4dd966-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.30/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847740, "uuid": "cd192c62-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.41/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847740, "uuid": "cd193e95-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://104.249.10.37/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847740, "uuid": "cd204adb-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://195.177.94.30/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847740, "uuid": "cd204c29-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.32/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847741, "uuid": "cdc81fcf-350f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.12/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847851, "uuid": "0f0b788e-3510-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.96.200/min1.sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847851, "uuid": "0f532f31-3510-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.96.200/ghost.sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847857, "uuid": "12def752-3510-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.96.200/lmm.gz", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847862, "uuid": "15a77467-3510-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.96.200/xmr.gz", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847914, "uuid": "34cb3c8b-3510-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://exposedeep.predestincent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775847964, "uuid": "5271c2f6-3510-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7900572318/Ew8thEw.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775848096, "uuid": "a16b22b3-3510-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://finalatom.predestincent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775848099, "uuid": "a2d147e5-3510-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.96.200/123/scan.py", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "py", "colour": "#ac075f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775848099, "uuid": "a2d14a8b-3510-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.96.200/n1/q1.py", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "py", "colour": "#ac075f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775848099, "uuid": "a2dad809-3510-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.96.200/c/py.py", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "py", "colour": "#ac075f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775848099, "uuid": "a2ded4a8-3510-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.96.200/New/scanner.py", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "py", "colour": "#ac075f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775848099, "uuid": "a2e84fb9-3510-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.96.200/sc/py.py", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "py", "colour": "#ac075f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775848099, "uuid": "a2ed30ea-3510-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.96.200/sc/scan.py", "Tag": [ { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "py", "colour": "#ac075f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775848267, "uuid": "06deaeb5-3511-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arklith0os.predestincent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775848581, "uuid": "c2725e41-3511-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.69.113:54434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775848686, "uuid": "00c7e265-3512-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://si1ent-dock.predestincent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775848940, "uuid": "97fa2bb5-3512-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.80.228:39637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775848993, "uuid": "b7f76f5e-3512-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://castgrove.predestincent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775849061, "uuid": "e06f84c2-3512-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.144.180:55762/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775849352, "uuid": "8e176319-3513-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mhspcr.predestincent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775849712, "uuid": "64a517a2-3514-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tr4ce5-trail.flamesre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775849765, "uuid": "840fcab2-3514-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/joshua/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775850008, "uuid": "14e838a4-3515-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://unilink.flamesre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775850008, "uuid": "14fd7f55-3515-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://setupproducts.com/download/net_launcher.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775850080, "uuid": "3fb6f35e-3515-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.149.120.3/download/launcher.dll", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775850312, "uuid": "ca4ec818-3515-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.120.17:47595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775850371, "uuid": "ed5ba08e-3515-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://moraltest.flamesre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775850618, "uuid": "80553c5f-3516-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.80.228:39637/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775850669, "uuid": "9ee7f95d-3516-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rs8ize.flamesre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775850847, "uuid": "08ac0f65-3517-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.144.180:55762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775850970, "uuid": "5265ff91-3517-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vvind-frame.flamesre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775851332, "uuid": "29eab1fb-3518-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://byte-mesh.flamesre5ent.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775851334, "uuid": "2afa5701-3518-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.254.245:54450/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775851630, "uuid": "dbd1acec-3518-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cach-route.particulscoop.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775851744, "uuid": "1fc811d3-3519-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8366134864/z69rt8Z.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775851986, "uuid": "af887731-3519-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://endpo7-port.particulscoop.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775852226, "uuid": "3edc082d-351a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.254.245:54450/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775852286, "uuid": "62d5630e-351a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://west-reach.particulscoop.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775852714, "uuid": "619f6c0e-351b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vor-litha.particulscoop.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775852724, "uuid": "6777529c-351b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.228.171:58708/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775853125, "uuid": "5699a53d-351c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/1202156955/oazZTCM.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775853249, "uuid": "a066929d-351c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ser-marken.particulscoop.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775853428, "uuid": "0b1e19ba-351d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vjdxcj1y.particulscoop.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775853670, "uuid": "9b49707d-351d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pc7il3.clin8company.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775854089, "uuid": "9557fcf4-351e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rpmfki.clin8company.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775854390, "uuid": "48b16df0-351f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mndchnr.clin8company.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775854458, "uuid": "7140d794-351f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.70.1:56404/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775854687, "uuid": "f9bc7037-351f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://balance-ring.clin8company.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775854872, "uuid": "67e26371-3520-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.70.1:56404/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775854986, "uuid": "ac2799be-3520-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://8cnv5b.clin8company.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775855062, "uuid": "d95df497-3520-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sesdigitalsolutions.com/files/EventVPcardSC_PU1KQZvw_installer.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775855296, "uuid": "64eb71bc-3521-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.228.191.23:39589/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775855348, "uuid": "83ad7ea1-3521-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stoneroad.clin8company.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775855712, "uuid": "5cdd1ede-3522-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://voice1-sync.p1aster-voice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775855884, "uuid": "c376c30b-3522-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/6560547276/8RtmSh6.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775856068, "uuid": "30b88591-3523-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talk-api2.p1aster-voice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775856125, "uuid": "52ec62c0-3523-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8115679349/5jhRKXx.msi", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775856368, "uuid": "e37fbb28-3523-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-call.p1aster-voice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775856728, "uuid": "ba15f235-3524-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault-svc4.p1aster-voice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775856733, "uuid": "bd17038e-3524-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.126.166:53120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775856980, "uuid": "504ef7f7-3525-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.228.191.23:39589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775857087, "uuid": "9013cea0-3525-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://audio-hub5.p1aster-voice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775857160, "uuid": "bb9e812c-3525-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.89.75:42797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775857219, "uuid": "def63e09-3525-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.228.87:33000/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775857387, "uuid": "43444f06-3526-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-way.p1aster-voice.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775857627, "uuid": "d2399111-3526-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.240.33:33143/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775857693, "uuid": "f93e4051-3526-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cut1-point.l2vashs-calpel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775857693, "uuid": "f96c3bc9-3526-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.125.212:42256/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775857700, "uuid": "fd9b437d-3526-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.228.87:33000/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775858051, "uuid": "cec4d9e3-3527-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sharp2-api.l2vashs-calpel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775858122, "uuid": "f94f2498-3527-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.102.18.69:46789/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775858228, "uuid": "382c97b8-3528-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.100.33:43991/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775858236, "uuid": "3d56a80f-3528-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.209.43:35001/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775858291, "uuid": "5dbaa6c3-3528-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.132.194:34847/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775858474, "uuid": "cabbdb0e-3528-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tool3-node.l2vashs-calpel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775858599, "uuid": "154eb0b0-3529-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.169.132:52783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775858599, "uuid": "155cb5bd-3529-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67:83/manji.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775858664, "uuid": "3c3ed3d0-3529-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67:83/manji.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775858664, "uuid": "3c58d883-3529-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67:83/manji.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775858713, "uuid": "595557e8-3529-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base4-vault.l2vashs-calpel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775858713, "uuid": "59973acd-3529-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67:83/manji.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775858713, "uuid": "5997dc2a-3529-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.67:83/manji.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775858828, "uuid": "9dbf4f1b-3529-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.239.70:33402/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775859007, "uuid": "0882b2bf-352a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8115679349/h00DkaU.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775859205, "uuid": "7e70367a-352a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.26.47:37624/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775859251, "uuid": "9a1cedda-352a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.93.6:57772/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775859252, "uuid": "9a6e1262-352a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.134.56.149:50142/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775859324, "uuid": "c5a7603c-352a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.26.47:37624/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775859374, "uuid": "e34154dd-352a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-relay.l2vashs-calpel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775859554, "uuid": "4ee1e052-352b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub6-gate.l2vashs-calpel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775859794, "uuid": "ddf4bfd9-352b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://web1-state.cesura-wate7y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775859806, "uuid": "e52c927d-352b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.228.86:54618/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775859852, "uuid": "007e6566-352c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.45.116:34766/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775860026, "uuid": "67c3b84e-352c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8115679349/h00DkaU.msi", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775860027, "uuid": "68b21f2d-352c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.100.33:43991/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775860028, "uuid": "691d3884-352c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.197.166:43506/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775860154, "uuid": "b4036754-352c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flow2-api.cesura-wate7y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775860448, "uuid": "635130ce-352d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://data3-node.cesura-wate7y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775860627, "uuid": "ce5ead0b-352d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.239.70:33402/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775860640, "uuid": "d60b7cca-352d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.43.182:46214/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775860641, "uuid": "d6728b9d-352d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.45.84:60855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775860794, "uuid": "31c3d450-352e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://info4-vault.cesura-wate7y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775860905, "uuid": "73e2c5b3-352e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.81.187:49792/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775860927, "uuid": "8107603d-352e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.73.146:40948/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775861169, "uuid": "11655c6d-352f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-secure.cesura-wate7y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775861179, "uuid": "1733c854-352f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.202.1:55169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775861364, "uuid": "85c5d27f-352f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.81.187:49792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775861418, "uuid": "a5c58561-352f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-main.cesura-wate7y.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775861713, "uuid": "55a0eaba-3530-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.45.116:34766/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775861775, "uuid": "7a78a6be-3530-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://track1-io.8rivastyinfamy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775862085, "uuid": "3314ee5b-3531-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.169.132:52783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775862130, "uuid": "4e322db9-3531-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api2-cloud.8rivastyinfamy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775862259, "uuid": "9b437b27-3531-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.37.14:38785/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775862261, "uuid": "9c3315e3-3531-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.43.182:46214/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775862386, "uuid": "e689968f-3531-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.15.123.94:44205/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775862547, "uuid": "46e3d3c8-3532-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-vault.8rivastyinfamy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775862854, "uuid": "fddd9c64-3532-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://file4-svc.8rivastyinfamy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775863041, "uuid": "6d01f9d1-3533-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.55.176:59697/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775863157, "uuid": "b1f02640-3533-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.55.176:59697/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775863209, "uuid": "d183d1dd-3533-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub5-relay.8rivastyinfamy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775863391, "uuid": "3d80336c-3534-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.65.255:44451/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775863517, "uuid": "88da8b07-3534-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main6-gate.8rivastyinfamy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775863586, "uuid": "b1a50aa5-3534-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.20.121:40675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775863810, "uuid": "3758e364-3535-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.37.14:38785/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775863817, "uuid": "3bb4331d-3535-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://learn1-app.semiunder-lear.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775864045, "uuid": "c362b4f5-3535-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7782139129/Dt0jmHC.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775864122, "uuid": "f1442b0e-3535-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.15.123.94:44205/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775864170, "uuid": "0e1d634b-3536-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://study2-api.semiunder-lear.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775864285, "uuid": "524dec59-3536-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/1781548144/iRROsSM.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775864531, "uuid": "e5551b60-3536-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-base.semiunder-lear.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775864714, "uuid": "522927e0-3537-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.166.231.98:41528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775864828, "uuid": "9631037b-3537-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault4-sync.semiunder-lear.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775865022, "uuid": "09964887-3538-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.20.121:40675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775865186, "uuid": "6bdac417-3538-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-hub.semiunder-lear.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775865487, "uuid": "1f34fa68-3539-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-point.semiunder-lear.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775818870, "uuid": "95516b85-34cc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "01bdp.velqo7rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775842630, "uuid": "e73580ee-3503-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "0hyb.faultmincin8.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775819467, "uuid": "f930c113-34cd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "0izjx27i.velqo7rin.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847725, "uuid": "c3caa859-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.249.10.37", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775822345, "uuid": "ac35a5cb-34d4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.165.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775801944, "uuid": "2c93f83b-34a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.248.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775862246, "uuid": "935128b9-3531-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.224.37.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775859787, "uuid": "d945a77f-352b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.186.228.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775782024, "uuid": "cb6f3e7d-3476-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.15.58", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775818145, "uuid": "e516ff25-34ca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.88.7.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775860868, "uuid": "5dcd9806-352e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.246.81.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775797507, "uuid": "d789638d-349a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.160.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775797385, "uuid": "8eef2282-349a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.255.209.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775803444, "uuid": "aa6c7ec9-34a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.230.28.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775846585, "uuid": "1c5e4564-350d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.98.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775855284, "uuid": "5d867492-3521-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.228.191.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775792106, "uuid": "445649a2-348e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.202.183.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775787364, "uuid": "3a187021-3483-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.127.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775788506, "uuid": "e2f61c21-3485-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.5.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775807106, "uuid": "31372620-34b1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.30.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775779206, "uuid": "3b6f7d82-3470-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.135.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775787964, "uuid": "a00179d6-3484-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.54.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775794085, "uuid": "dfdda08f-3492-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.170.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775863388, "uuid": "3bcc4957-3534-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.65.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775808185, "uuid": "b4336837-34b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.67.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775857206, "uuid": "d73a44b0-3525-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.228.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775807824, "uuid": "dd744d6f-34b2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.187.43", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775846705, "uuid": "63ebdf59-350d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.80.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775841125, "uuid": "6641adb9-3500-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.163.91", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775858107, "uuid": "effedd0f-3527-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.102.18.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775833505, "uuid": "a83763d6-34ee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.164.29.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775844905, "uuid": "33576a30-3509-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.166.231.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775797026, "uuid": "b90db638-3499-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.189.213.101", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775803024, "uuid": "b058b322-34a7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.226.225.157", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775810524, "uuid": "26b84cad-34b9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.231.183.50", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775799005, "uuid": "54ae6e1b-349e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.191.182.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775819764, "uuid": "aa08f183-34ce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.224.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775863025, "uuid": "63aa2215-3533-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.55.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775810645, "uuid": "6e959dcc-34b9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.241.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775844724, "uuid": "c7333394-3508-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.227.40", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775859244, "uuid": "96088700-352a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.134.56.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775849046, "uuid": "d7830d1d-3512-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.144.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775857625, "uuid": "d0b13501-3526-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.240.33", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775795345, "uuid": "cee6d25c-3495-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.53.111.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775841725, "uuid": "cb9a00e5-3501-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.241.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835064, "uuid": "49bb8bd7-34f2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.27.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775836205, "uuid": "f1dcbb4d-34f4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.228.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775808245, "uuid": "d7f6b118-34b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.116.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775794626, "uuid": "22814f82-3494-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.2.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835005, "uuid": "261377c0-34f2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.230.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775834647, "uuid": "50d54b77-34f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.252.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821566, "uuid": "dbf6b89d-34d2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.32.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775851325, "uuid": "25e35986-3518-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.254.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775791446, "uuid": "bb1118db-348c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.222.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775805605, "uuid": "b2dc4ade-34ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "150.255.251.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775802544, "uuid": "92480378-34a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "154.242.0.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775842625, "uuid": "e3eea0da-3503-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.87.163", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775838845, "uuid": "170cffb7-34fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.151.119.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775788324, "uuid": "7652c688-3485-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.107.58", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835484, "uuid": "4403405e-34f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.105", "Tag": [ { "name": "176-65-139-105", "colour": "#22475f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817184, "uuid": "a83eb0bc-34c8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.6.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775802424, "uuid": "4a6c0c44-34a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.39.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775813225, "uuid": "702f6346-34bf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.75.76", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775812925, "uuid": "bd570597-34be-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.218.118", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775799126, "uuid": "9cb439c5-349e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.229.66", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775848564, "uuid": "b8247d5b-3511-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.69.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775783285, "uuid": "ba88ff40-3479-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.191.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775780225, "uuid": "9ab396a4-3472-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.253.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775829605, "uuid": "93c8855b-34e5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.178.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775793485, "uuid": "7a3b4277-3491-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.179.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775780646, "uuid": "95fdc3db-3473-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.183.165.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775850064, "uuid": "3660cedd-3515-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.149.120.3", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847725, "uuid": "c3c7c7f1-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.177.94.30", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847725, "uuid": "c3c9038f-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.177.94.41", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847725, "uuid": "c3c95f6f-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.177.94.74", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775803565, "uuid": "f2cf6102-34a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "211.158.212.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775804585, "uuid": "52bca1cd-34ab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.192.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775858825, "uuid": "9bf7ebbf-3529-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.239.70", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775795765, "uuid": "c97a1e4f-3496-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.202.91.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775806324, "uuid": "5efe5aca-34af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.1.109.243", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775859244, "uuid": "960886f6-352a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.93.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775794265, "uuid": "4b98abe4-3493-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.145.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775802424, "uuid": "4a6bf796-34a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.230.50", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775846824, "uuid": "ab370a11-350d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.27.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775834224, "uuid": "55042b33-34f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.254.166", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821566, "uuid": "dbf69671-34d2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.206.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775779444, "uuid": "c9b091be-3470-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.211.8.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775798164, "uuid": "5f8df00e-349c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.179.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775858225, "uuid": "3657f7f2-3528-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.209.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775788625, "uuid": "2983d950-3486-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.48.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775793666, "uuid": "e6588eb4-3491-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.115.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775857144, "uuid": "b2526289-3525-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.89.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775832967, "uuid": "676a2357-34ed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "289rabl.zeltorinax.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775805964, "uuid": "88914b25-34ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.89.252.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775823906, "uuid": "4eed8e85-34d8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.98.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775792825, "uuid": "f114e908-348f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.151.154", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775832664, "uuid": "b2db077e-34ec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.23.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775802125, "uuid": "988144c7-34a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.118.112", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775857685, "uuid": "f480db63-3526-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.125.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775859846, "uuid": "fc82b101-352b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.45.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775827025, "uuid": "91d3a984-34df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.228.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775796064, "uuid": "7bde79a5-3497-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.166.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775807465, "uuid": "06f49256-34b2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.136.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775858225, "uuid": "3657f16b-3528-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.100.33", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775844425, "uuid": "14edf25c-3508-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.49.65", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775848924, "uuid": "8ef0a4c2-3512-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.80.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775860625, "uuid": "cd55c068-352d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.45.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775831224, "uuid": "58e4ab65-34e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.103.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775827204, "uuid": "fca36d49-34df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "4zure-hold.plix9anor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775843287, "uuid": "6ebb4b34-3505-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5csau02h.faultmincin8.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775844184, "uuid": "859f06eb-3507-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.178.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847305, "uuid": "c9d151d9-350e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60moi.canone7node.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847544, "uuid": "58584870-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.131.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775861164, "uuid": "0e8a4a25-352f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.202.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775790244, "uuid": "eef87ca0-3489-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.68.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775829784, "uuid": "fe80ae56-34e5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.156.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817425, "uuid": "378af1f7-34c9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.174.69", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775858284, "uuid": "59a53f19-3528-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.132.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775786824, "uuid": "f8702fff-3481-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.164.130.55", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847844, "uuid": "0b31b5a4-3510-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.110.96.200", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#ea946a", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "py", "colour": "#ac075f", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775822589, "uuid": "3df10ef4-34d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "7mic.qorvy3nal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775828825, "uuid": "c2d1d9ec-34e3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "80ycuu.vortaqen.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775816225, "uuid": "6c544777-34c6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "81.215.173.87", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775788925, "uuid": "dc656ef2-3486-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.209.254.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821865, "uuid": "8e4c9ad0-34d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.11.167.129", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775862365, "uuid": "da22b2de-3531-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.15.123.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775836630, "uuid": "ef04391c-34f5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "851xsk.erectreset.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775820485, "uuid": "578c2a76-34d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "869n.stravexi.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775854985, "uuid": "ab0e7805-3520-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "8cnv5b.clin8company.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775784965, "uuid": "a4592e31-347d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "90.251.127.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847725, "uuid": "c3c87650-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.32.12", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847725, "uuid": "c3c7c0e9-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.32.29", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847725, "uuid": "c3c838a7-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.32.32", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847725, "uuid": "c3c8b20f-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.32.74", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847725, "uuid": "c3ca4b38-350f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.32.80", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817910, "uuid": "58f325bc-34ca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alignsort.xynotrax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775784726, "uuid": "158c7388-347d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alpha-svc.firstbeasts.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775809029, "uuid": "ab2ad656-34b5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-so11d.obsessivescum.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775781545, "uuid": "ad827acc-3475-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ambe8-trace.buildingstab.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775782865, "uuid": "c0327adb-3478-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ancientpipeline.buildingstab.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775862127, "uuid": "4c93df75-3531-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api2-cloud.8rivastyinfamy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775823846, "uuid": "2ac31b98-34d8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkfluxal.qorvy3nal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775848265, "uuid": "05bb8cc3-3511-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arklith0os.predestincent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775791865, "uuid": "b4db1ed7-348d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "art-api.choreograpshrew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847008, "uuid": "188dba01-350e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "asset5-track.canone7node.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775857084, "uuid": "8ea74899-3525-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "audio-hub5.p1aster-voice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775802187, "uuid": "bd2a651d-34a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "aura-api.aurasamodians.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817249, "uuid": "cf12b32f-34c8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "autu-grid.xynotrax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775842213, "uuid": "eece7096-3502-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "b4rk-craft.faultmincin8.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775854685, "uuid": "f855c316-351f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "balance-ring.clin8company.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775858710, "uuid": "577e2218-3529-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base4-vault.l2vashs-calpel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775784424, "uuid": "61d910b7-347c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "beast-vault.firstbeasts.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775787124, "uuid": "ab11d5f8-3482-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "book-hub.hisslytori.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775851329, "uuid": "287b7bb0-3518-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "byte-mesh.flamesre5ent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775851629, "uuid": "dac6e4cd-3518-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cach-route.particulscoop.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775808365, "uuid": "1fcaffb9-34b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "campaigndecode.choreograpshrew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775848988, "uuid": "b4a2c352-3512-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "castgrove.predestincent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775819885, "uuid": "f1fd2864-34ce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "celllaunch.velqo7rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775790785, "uuid": "314eba8e-348b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clean-svc.symposiumwash.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821144, "uuid": "e0c97dd4-34d1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cleanbind.stravexi.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775841252, "uuid": "b1a122e0-3500-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clear-hinge.fineon1y.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789165, "uuid": "6b794e4c-3487-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "club-hub.athleticscrew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775832368, "uuid": "0257936a-34ec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "composerefine.zeltorinax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775798231, "uuid": "871e4c28-349c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cook-node.pampushkatimp.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775788147, "uuid": "0ce5a52c-3485-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "crew-node.athleticscrew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775857685, "uuid": "f489f427-3526-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cut1-point.l2vashs-calpel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775831645, "uuid": "535d7835-34ea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "d1sc4-wave.kyno4rexil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775819174, "uuid": "4a427b3b-34cd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "daevia.velqo7rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775792585, "uuid": "6206bf36-348f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dance-vault.choreograpshrew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775860445, "uuid": "61a762a2-352d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "data3-node.cesura-wate7y.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775833324, "uuid": "3c6cbfe1-34ee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "decodebran.zeltorinax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775812687, "uuid": "2fccb898-34be-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dense3-trail.honeupwar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775824505, "uuid": "b410ecd4-34d9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dyncresten9.drimoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775834647, "uuid": "50e27eae-34f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynvenor.bravo1nixu.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775806747, "uuid": "5b2e056a-34b0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dzgcdhze.athleticscrew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775851984, "uuid": "ae64d358-3519-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "endpo7-port.particulscoop.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775830685, "uuid": "1773b42f-34e8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "equity-colum.kyno4rexil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775825170, "uuid": "403755bc-34db-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "equitytorre.drimoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775790185, "uuid": "cb8a7cc5-3489-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "event-node.symposiumwash.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775780167, "uuid": "7892c2e1-3472-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ew59tugm.selflessrowdy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775810048, "uuid": "0ae0e7ef-34b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "expor-sor.againstvisitor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775847905, "uuid": "2f87fb11-3510-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "exposedeep.predestincent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775810350, "uuid": "bef70974-34b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "extendplain.againstvisitor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775809626, "uuid": "0f880103-34b7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "factoryserver.obsessivescum.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775806565, "uuid": "eecf649e-34af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "falc0n0-phase.athleticscrew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775862851, "uuid": "fc09e3e4-3532-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "file4-svc.8rivastyinfamy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775848086, "uuid": "9b2ea7f6-3510-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "finalatom.predestincent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835609, "uuid": "8e60fdbd-34f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fleestrict.bravo1nixu.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775860150, "uuid": "b1e57b84-352c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flow2-api.cesura-wate7y.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775794150, "uuid": "0720db66-3493-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "focus-node.obsessivescum.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775797930, "uuid": "d3d79119-349b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "food-api.pampushkatimp.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775843885, "uuid": "d31766cd-3506-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "formatmeas.airportbude.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775841610, "uuid": "872a79df-3501-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "freightdynam.faultmincin8.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775808665, "uuid": "d24e8d1b-34b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fressolar.choreograpshrew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775797511, "uuid": "da242fe2-349a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate-api.againstvisitor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775801649, "uuid": "7ca73a9a-34a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate-check.honeupwar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775785444, "uuid": "c1cc71af-347e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate-node.firstbeasts.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775799547, "uuid": "978b6ec6-349f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate-node.pampushkatimp.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775793490, "uuid": "7d7c0841-3491-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate-svc.choreograpshrew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775861415, "uuid": "a42dff93-352f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-main.cesura-wate7y.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775865485, "uuid": "1d94d845-3539-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-point.semiunder-lear.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775857384, "uuid": "415f37ea-3526-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-way.p1aster-voice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775780885, "uuid": "244e457f-3474-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "genomedeco.selflessrowdy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775820847, "uuid": "2fa819e2-34d1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-hyp3r.stravexi.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775829487, "uuid": "4d4f440a-34e5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geysermars.vortaqen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775810709, "uuid": "949dc913-34b9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gr1m2-vault.againstvisitor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775817550, "uuid": "8291262e-34c9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "guardfierce.xynotrax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775796248, "uuid": "e937b353-3497-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "guest-node.againstvisitor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775800926, "uuid": "cdbe3781-34a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hone-svc.honeupwar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775797212, "uuid": "280d954e-349a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "host-hub.againstvisitor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775833686, "uuid": "141651a4-34ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hsp96wn.zeltorinax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775801285, "uuid": "a3c2b64c-34a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub-relay.honeupwar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775863207, "uuid": "d01f738a-3533-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub5-relay.8rivastyinfamy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775859552, "uuid": "4d48421e-352b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub6-gate.l2vashs-calpel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775807651, "uuid": "75d91bf2-34b2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hubsyntax.symposiumwash.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775839214, "uuid": "f2ceda78-34fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyper-5i1ver.fineon1y.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775833987, "uuid": "c75368bc-34ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "iktol.zeltorinax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775843587, "uuid": "21a7d8a3-3506-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "impo-casc.airportbude.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775837537, "uuid": "0b4279e4-34f8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "importsnow.erectreset.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775860792, "uuid": "304f58d1-352e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "info4-vault.cesura-wate7y.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775781126, "uuid": "b3ea6023-3474-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "inkcoo.selflessrowdy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775841849, "uuid": "159e73e9-3502-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "j84f4g0p.quantumharbinger.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775811669, "uuid": "d1462838-34bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jv0nel9.pampushkatimp.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821865, "uuid": "8e772101-34d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jxoov.stravexi.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775781845, "uuid": "60584b45-3476-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kb0xbi23.buildingstab.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775838495, "uuid": "4678aafe-34fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lab3l-node.fineon1y.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775863812, "uuid": "386f1e42-3535-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "learn1-app.semiunder-lear.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775804344, "uuid": "c31e03e7-34aa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lichensparrow.firstbeasts.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775836025, "uuid": "86239e36-34f4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ligfleet.bravo1nixu.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775802606, "uuid": "b74d811a-34a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "light-vault.aurasamodians.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775791565, "uuid": "023443d8-348d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "link-gate.symposiumwash.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775844305, "uuid": "cdadab9e-3507-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "loosematrix.airportbude.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775826487, "uuid": "50edc349-34de-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lum-tidear.plix9anor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775831224, "uuid": "58ed840c-34e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumvalea.kyno4rexil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775805309, "uuid": "01dff4c9-34ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunopen.hisslytori.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789524, "uuid": "41bcddbc-3488-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-gate.athleticscrew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775863512, "uuid": "859a2fff-3534-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main6-gate.8rivastyinfamy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775816826, "uuid": "d2a36b4e-34c7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mark-roo.xynotrax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775811367, "uuid": "1d35c404-34bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meadow-bro.pampushkatimp.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775799364, "uuid": "2ac4f09e-349f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "menu-hub.pampushkatimp.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775845624, "uuid": "dfd6aece-350a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-5udd.canone7node.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775832008, "uuid": "2c43d55a-34eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "metri-oak.kyno4rexil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775849349, "uuid": "8bf45e68-3513-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mhspcr.predestincent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775793846, "uuid": "5167582c-3492-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mind-api.obsessivescum.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775806925, "uuid": "c5885e9f-34b0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mixech.symposiumwash.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775854385, "uuid": "45ed127c-351f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mndchnr.clin8company.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775850367, "uuid": "eacb1653-3515-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "moraltest.flamesre5ent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775807285, "uuid": "9c0a94c8-34b1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "msez.symposiumwash.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775818512, "uuid": "bfafff6c-34cb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-3xpo.velqo7rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775827446, "uuid": "8ce3520c-34e0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neuralvau.plix9anor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775830384, "uuid": "641a613a-34e7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ngwq.kyno4rexil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775864525, "uuid": "e16a9c21-3536-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-base.semiunder-lear.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775856365, "uuid": "e1f13806-3523-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-call.p1aster-voice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775862544, "uuid": "45178359-3532-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-vault.8rivastyinfamy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775813349, "uuid": "ba492638-34bf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nordraa8.aurasamodians.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775829191, "uuid": "9cc97f03-34e4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "norforge2ar.vortaqen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775816165, "uuid": "48a06a54-34c6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ouya691.xynotrax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775805610, "uuid": "b58b0285-34ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "p4cket-stack.hisslytori.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775832732, "uuid": "db59a31c-34ec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "p4rtn0-forge.zeltorinax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775785144, "uuid": "0ec7ec95-347e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pack-hub.firstbeasts.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775786464, "uuid": "21a9def8-3481-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "page-vault.hisslytori.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775799126, "uuid": "9cc2228b-349e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pamp-svc.pampushkatimp.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775841914, "uuid": "3ca669d2-3502-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "passivedusk.faultmincin8.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775813043, "uuid": "04143612-34bf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pbpx.aurasamodians.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775853664, "uuid": "9828d611-351d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pc7il3.clin8company.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775834346, "uuid": "9da84750-34f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "porter.bravo1nixu.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775779506, "uuid": "ee37e985-3470-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pqxyg.selflessrowdy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775780525, "uuid": "4dbced8f-3473-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "price-basic.selflessrowdy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775838845, "uuid": "17173d75-34fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "primpartn.fineon1y.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775828524, "uuid": "0f8c9b32-34e3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "q6ivtu.vortaqen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775813706, "uuid": "8ef77ce8-34c0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qy55tnaq.aurasamodians.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775811963, "uuid": "804367c5-34bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rapivelv.honeupwar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775787484, "uuid": "81e2a416-3483-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "read-gate.hisslytori.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775845445, "uuid": "75091830-350a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "reef-drive.airportbude.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775838191, "uuid": "9144bbbd-34f9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rh0zttub.erectreset.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775811005, "uuid": "45225165-34ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rhexjd.pampushkatimp.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775803625, "uuid": "16856e82-34a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "root-gate.aurasamodians.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775795585, "uuid": "5de3320a-3496-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "root-gate.obsessivescum.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775854084, "uuid": "928a4dda-351e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rpmfki.clin8company.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775850666, "uuid": "9cdd2489-3516-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rs8ize.flamesre5ent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775788808, "uuid": "96ad6739-3486-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "run-svc.athleticscrew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775796964, "uuid": "9469c739-3499-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "safe-svc.againstvisitor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775802426, "uuid": "4bb67e99-34a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sam-node.aurasamodians.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775812385, "uuid": "7bdb0dd1-34bd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "scenevivid.honeupwar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775794565, "uuid": "fe6af9d5-3493-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "scum-vault.obsessivescum.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775804590, "uuid": "554acf5f-34ab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sdkpasture.firstbeasts.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775805906, "uuid": "65b2e9d4-34ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "securesocket.athleticscrew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775853245, "uuid": "9e423975-351c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ser-marken.particulscoop.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775840890, "uuid": "d9ddb7ef-34ff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sercrestos9.fineon1y.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775779808, "uuid": "a29c28ef-3471-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "serforgea.selflessrowdy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775837831, "uuid": "baf71545-34f8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "serven0ix.erectreset.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775855050, "uuid": "d1dcb4e4-3520-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sesdigitalsolutions.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775799908, "uuid": "6eda36d3-34a0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "set-api.honeupwar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775850006, "uuid": "138ac405-3515-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "setupproducts.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775803927, "uuid": "ca54371d-34a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sgqh.firstbeasts.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775858046, "uuid": "cb9a5a86-3527-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sharp2-api.l2vashs-calpel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775792885, "uuid": "14ff789a-3490-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shrew-svc.choreograpshrew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775848684, "uuid": "ffab305e-3511-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "si1ent-dock.predestincent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775795292, "uuid": "af5f720e-3495-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "site-hub.obsessivescum.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775791206, "uuid": "2bf8e124-348c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "site-hub.symposiumwash.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775803269, "uuid": "4219f40e-34a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sky-hub.aurasamodians.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775824809, "uuid": "68c4b32c-34da-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "slatedraft.drimoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775782205, "uuid": "37079c6a-3477-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sol-lithum.buildingstab.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775846585, "uuid": "1c7558e3-350d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solcoreal5.canone7node.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775846285, "uuid": "69950222-350c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soundencode.canone7node.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775809265, "uuid": "3802e9b6-34b6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sparkecho.obsessivescum.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775788445, "uuid": "be55419e-3485-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sport-vault.athleticscrew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775831406, "uuid": "c55ab600-34e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "st4bi-spool.kyno4rexil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775802965, "uuid": "8ce77c10-34a7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "star-svc.aurasamodians.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775795830, "uuid": "f07a1729-3496-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stay-api.againstvisitor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775792465, "uuid": "1a660e27-348f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "step-node.choreograpshrew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775855345, "uuid": "81b70336-3521-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stoneroad.clin8company.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775785745, "uuid": "74d1da4f-347f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "story-api.hisslytori.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775864167, "uuid": "0c33149b-3536-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "study2-api.semiunder-lear.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775824085, "uuid": "b9419a0f-34d8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sub-ch3c.drimoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775816533, "uuid": "23f9581c-34c7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sudden-lab.xynotrax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775842924, "uuid": "96b23a65-3504-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "suyjbrc.faultmincin8.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775865185, "uuid": "6ac485fd-3538-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-hub.semiunder-lear.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775859370, "uuid": "e0f27c06-352a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-relay.l2vashs-calpel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775861167, "uuid": "0fd590f6-352f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-secure.cesura-wate7y.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775818265, "uuid": "2c9d9a9c-34cb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sync6-signal.velqo7rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775786106, "uuid": "4bfbc57b-3480-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tale-node.hisslytori.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775789826, "uuid": "f5b76ecd-3488-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talk-api.symposiumwash.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775856064, "uuid": "2e868e40-3523-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talk-api2.p1aster-voice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775820192, "uuid": "a8d7b915-34cf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talvenos2.stravexi.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775794870, "uuid": "b431e656-3494-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "task-svc.obsessivescum.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775787786, "uuid": "3591dcc5-3484-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "team-api.athleticscrew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775783165, "uuid": "730e0662-3479-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tencreek.buildingstab.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775786767, "uuid": "d685db59-3481-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "text-svc.hisslytori.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775798588, "uuid": "5c498e55-349d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "timp-vault.pampushkatimp.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775858472, "uuid": "c98ae48d-3528-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tool3-node.l2vashs-calpel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775849708, "uuid": "62036289-3514-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tr4ce5-trail.flamesre5ent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775784065, "uuid": "8bd90696-347b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "track-node.firstbeasts.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775861771, "uuid": "78581148-3530-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "track1-io.8rivastyinfamy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775827865, "uuid": "86b6e97b-34e1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tradesyn.plix9anor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775823247, "uuid": "c6042b20-34d6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trai0-plate.qorvy3nal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775826127, "uuid": "7a5ff1c2-34dd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trans-vocal.plix9anor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775782446, "uuid": "c671902d-3477-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trispire1ar.buildingstab.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775845929, "uuid": "958f0a28-350b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ubped.canone7node.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775829909, "uuid": "48d1fee6-34e6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ultglyp.vortaqen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775845210, "uuid": "e9111bbb-3509-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ultra-gr4nit.airportbude.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775850006, "uuid": "139097fb-3515-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "unilink.flamesre5ent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775793251, "uuid": "ef134aa5-3490-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "unit-hub.choreograpshrew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775800566, "uuid": "f7558f2f-34a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "up-vault.honeupwar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775836812, "uuid": "5b81eac9-34f6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "updv1.erectreset.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775826845, "uuid": "26509330-34df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "v31vet0-sheet.plix9anor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835844, "uuid": "1aa8da62-34f4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "valley-con.bravo1nixu.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775856725, "uuid": "b8a165d6-3524-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault-svc4.p1aster-voice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775864825, "uuid": "947f063f-3537-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault4-sync.semiunder-lear.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775823425, "uuid": "3030cc2c-34d7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vaultwagon.qorvy3nal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775805005, "uuid": "4d1907e6-34ac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "velcoreal.hisslytori.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775828164, "uuid": "38c5fa4d-34e2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "velvale7on.vortaqen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775835005, "uuid": "261b58ce-34f2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vi5u4l-branch.bravo1nixu.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775822885, "uuid": "ee5af8a9-34d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "videovit.qorvy3nal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775796790, "uuid": "2c749eea-3499-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "visit-vault.againstvisitor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775853426, "uuid": "09df25e3-351d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vjdxcj1y.particulscoop.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775855710, "uuid": "5b8c07e8-3522-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "voice1-sync.p1aster-voice.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775852708, "uuid": "5e12300d-351b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vor-litha.particulscoop.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775808008, "uuid": "4ad54686-34b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vorvale7um.choreograpshrew.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775850966, "uuid": "4fc104e7-3517-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vvind-frame.flamesre5ent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775800267, "uuid": "44de7bca-34a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "war-node.honeupwar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775790485, "uuid": "7e34c5e9-348a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wash-vault.symposiumwash.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775859792, "uuid": "dc8f75d3-352b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "web1-state.cesura-wate7y.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775852284, "uuid": "61792478-351a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "west-reach.particulscoop.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775783886, "uuid": "214ea704-347b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wild-api.firstbeasts.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775821568, "uuid": "dd4628cd-34d2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wtnbx.stravexi.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775825467, "uuid": "f0f6580b-34db-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xgi87u.drimoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775822227, "uuid": "66264174-34d4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xmkzarzz.qorvy3nal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775825766, "uuid": "a377ba34-34dc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xpprcq.drimoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775844608, "uuid": "81f1e384-3508-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yssym17.airportbude.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775837170, "uuid": "309be3f4-34f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zenvaleex.erectreset.in.net" } ] } }