{ "Event": { "published": true, "date": "2026-04-11", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-11", "timestamp": 1775952923, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "5b760faf-7482-48bb-a8e4-67fcee5dcaa0", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1775866636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775866636, "uuid": "de2efe3c-70bc-43cb-9071-e9994ca8fe6c", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775866636, "uuid": "3c06e820-303b-437c-93ae-d9a422fe929e", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775866636, "uuid": "3e59ec8f-2fee-4779-b148-9d9551e10ed6", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775866636, "uuid": "0bef91f6-9f8e-4280-af4c-54dab741f5a3", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775866636, "uuid": "6bfd85cc-2d78-4386-a6de-fc7e7a6d9b33", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1775867060, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775867060, "uuid": "8c2808cf-2da8-4039-807d-242388b16c8b", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775867060, "uuid": "9cab1f57-9bd8-4e0b-b14a-9b1d8286df8a", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775867060, "uuid": "1128f6a9-ef0c-483c-8bcd-c092916d9551", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775867060, "uuid": "8e7edac8-4ceb-489a-8493-8f19d8776bca", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775867060, "uuid": "441d8e19-ac6c-40e0-9802-ce5c23f42f57", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775871726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775871726, "uuid": "6291840d-c8a6-456d-b07d-0542c65ac68a", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775871726, "uuid": "2a6086fe-35c6-42b6-a81d-09dd397a2c1e", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775871726, "uuid": "fc23ec0d-bdb3-4c0c-a235-977d1eeccde7", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775871726, "uuid": "1e5a66c7-84d4-4532-adf9-9b4fc679cc39", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775871726, "uuid": "5d60a4b3-4516-43f4-8824-f45344b4361a", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95d9ce60-34d3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775880139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775880139, "uuid": "86f822da-c709-4331-bb65-bd7b6e3a3695", "comment": "Malware payload (Mirai)", "value": "9026bb26ea49a7ddd1ab5218afb55361", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775880139, "uuid": "fdfbfd43-f97d-4ee8-9bac-23af2c5ce776", "comment": "Malware payload (Mirai)", "value": "6b4fa5b84da132d9746f6af281f8ddafbedd04719b11a0d1269d6168cbe69be8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775880139, "uuid": "1cc4ca3e-37cb-410e-b8e2-50e12d4eb2f7", "value": "T143E2F26A51ECB12CE44E903BC32FA98E31E65D11BE17C69424C476DADF611F910B68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775880139, "uuid": "f3998107-8445-4bdc-bf56-205716dff88e", "value": "768:g32bRAqg2UQzSPMjFY8AFOEPB6ZSq7xnwNQBUx:DbRAp2U4ECF+FvB6ZSonwN2K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775880139, "uuid": "e522af17-4d2b-4ff5-a636-42fa39dab31b", "value": 33900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775880139, "uuid": "1c1007ad-0692-4d85-9316-81f29ce53a97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da26c043-3561-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775882981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775882981, "uuid": "ca6bced9-a3d4-43db-8ee6-b27d369cc748", "comment": "Malware payload", "value": "2357df8f33554f8e4d87d581e57927db", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775882981, "uuid": "63407503-b14d-4efb-a139-5e658b08a273", "comment": "Malware payload", "value": "7a40aff3a946faa4b746095622b6717bd7ff556d81a6adf4d22546e5e648fa5a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775882981, "uuid": "890cdd05-8cf0-4a7f-9603-514da735186b", "value": "T1B393E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775882981, "uuid": "044d6f7a-b3bb-4664-9301-6c0091afe951", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPX5IH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775882981, "uuid": "af87e693-0e71-45b2-9da9-8bb090b9759a", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775882981, "uuid": "f9e09a74-7c95-4a9c-8d4a-91faf4affae6", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e411f9d-3563-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775883659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775883659, "uuid": "6879cf22-0d1f-4baf-b8c4-3da0da86c2be", "comment": "Malware payload (ConnectWise)", "value": "f862146ec900136b0a526521568512a2", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775883659, "uuid": "f9b48db2-bed9-4f15-a81b-fb9c16a62224", "comment": "Malware payload (ConnectWise)", "value": "e23cfdf4435e9db88cc2d51061418291995b03f547ad628b22311129951291ec", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775883659, "uuid": "217ae434-9d09-49f6-a62d-c7b3bb7b5b92", "value": "T1B7D62311ABF8A269F0F22A35E977A0B1E5367C125D22D12E2324791E2C75EC0C9737", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775883659, "uuid": "ecdc9497-c7e4-495c-bab0-a7f6cce4d27b", "value": "196608:4Hxcp9ym3nltDUJVBHxcp9ym3oHxcp9ym3sHxcp9ym3SHxcp9ym3CHxcp9ym3fHg:GGplpqGp2GpKGpgGpQGppGpP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775883659, "uuid": "35daa5aa-2d3a-40ed-8c82-29762c079b76", "value": 13557760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775883659, "uuid": "24f7515e-464e-4e4d-917c-0ace9d03c9c9", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c93813d-3564-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775884112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775884112, "uuid": "3379a840-70f0-44aa-9de7-f2cb3ab61859", "comment": "Malware payload", "value": "ab77116c5ead7bf9b3df5ca46bceba2e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775884112, "uuid": "a7faa937-fc3c-4659-b90c-a2f75e9afec8", "comment": "Malware payload", "value": "d3565fc6a3059ea3759612908f5a6bccbe64bfab28b80266bba040277e38ac15", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775884112, "uuid": "c79d4477-c8d3-49d8-bbcc-b78f7cfe9fb7", "value": "T11E8309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775884112, "uuid": "5e0f7171-c96c-422b-82f1-8da25a4212e4", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbn8WanVN/:XEKltp9txAX/yr2pb8W6VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775884112, "uuid": "46a70b83-4188-4682-a5d1-09b4cb950517", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775884112, "uuid": "3751e669-53f5-462d-a95e-6ff8cfb38474", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed86e69e-3564-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775884302, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775884302, "uuid": "e8d42ad8-b458-4ef6-ad74-b888b7f45d08", "comment": "Malware payload", "value": "1c1efe197ef36264dd2de6b08cb52ca7", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775884302, "uuid": "000770c8-71eb-424f-b2d2-3a0db4adbe48", "comment": "Malware payload", "value": "94c50ef060e38742798bc0f96389d46a11fc44b0f10e62e66215b44dff56c769", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775884302, "uuid": "7a4c395b-599d-4fe3-b1c0-f6c7fe24932f", "value": "T1220410F37711167FAD78C8EB7B1949C9606EFF4043A0A0A2DB9F689094A4753E03A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775884302, "uuid": "4ac931b9-e230-4137-ac20-d2e827150754", "value": "3072:sCxr6Q495JlJ+oyIxhVtmxpimNKyLb8QzTtcDlhN:Hc7xK7zS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775884302, "uuid": "798004c8-f114-446a-ad62-a0ad92b10d0b", "value": 175255, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775884302, "uuid": "e2bc4d8f-5f89-45a6-8031-f8fd50ea5bb6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0c2edf2-3566-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775885059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775885059, "uuid": "e9fec0e1-e697-47ac-964d-d5c93e773181", "comment": "Malware payload", "value": "cba22b0fe991451be03219ae8b51ec2c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775885059, "uuid": "670e3349-4d75-4d52-a2f6-a9f29873522a", "comment": "Malware payload", "value": "7ce3a9e05bb8776949b68d68c6f30e68d93ccb528c586e84d262a2a2393e4eff", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775885059, "uuid": "72e6afe0-5e25-4e26-8bb1-f2441ef9ab46", "value": "T164931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775885059, "uuid": "5f33bdc7-db29-4c32-8348-f933519302e0", "value": "1536:0Byp1tF/uwMmAIa14oXx+IMepeV7tb73WdxCrCitkb5fv2v05xsprCKE1sPyKKt8:08jIL0GitkbFv2v05xsprW1sPydt3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775885059, "uuid": "23b49ca1-cc28-42f5-bb3a-8b7f7e379391", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775885059, "uuid": "3203ed08-c725-4c2a-bd22-2b7a84f963ce", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6910f3d-356c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775887699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "f8d15dec-a8a7-400d-9958-f49e6209cd16", "comment": "Malware payload (Mirai)", "value": "e17f40cc338c55602b2900740a2384bf", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "6d93bed0-1bc7-40d5-98ca-2f54be6c146e", "comment": "Malware payload (Mirai)", "value": "3c01145ed6ba3ada22abab16cdccabeac722fb6f6145fc2a316a10244790003c", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "bb1b3b70-35a9-41b4-8ffb-79755ff49d76", "value": "T10C82B0A01571EE31C3700876DA7D4B83329682EDE3EBB6357978028A73E605657FD2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "c815b305-0b27-454e-843b-490f70dc552c", "value": "384:e2ZK/RG5lCrKHIQ2RLSxrmaCB6yLwP/eJ3nNhymdGUop5huAh:1nlCr9Qe9LwOJ3Ns3UozM0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775887699, "uuid": "e6fb06b8-6da0-407a-98d3-9146a7407978", "value": 18680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "0d9d0b23-da4f-43f6-87c8-1052be036a63", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d69cb2de-356c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775887699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "d57c70a8-cd18-4cdc-be69-33a68c05df87", "comment": "Malware payload (Mirai)", "value": "a5fe3920b446e150f572480e24f21d61", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "d0fcb33a-8db9-41f7-89eb-5cfdfbbbf60f", "comment": "Malware payload (Mirai)", "value": "dd6c2d5fbb4d3268ecb30692042b09d8ec52a60b9272d879f9c2fb905e8345fb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "6d378f16-2e3b-479b-b3ce-cf2ef180acd5", "value": "T1B713F1E7D0FCA752CD1C1A7E98C7F92E1C50DF0C1F9AD9D90988783A944AB2966085", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "32d0e9c3-6d8c-4dac-b87f-74113105e23b", "value": "768:Sp0/5yl//KEoBSmI+It8tH/H+l58/T2oiyMjYESMFBZ4EinbcuyD7UHQRjV:h5yl3UBSmI+O85H+l59yM0MFBinouy8a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775887699, "uuid": "931dbc2e-3820-4845-9425-b831b2edb90a", "value": 41468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "fb983d78-2d71-45ff-9c5c-d100471cb682", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6a4bbf9-356c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775887699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "27e8555a-1118-4f5c-a51e-ad84f5911993", "comment": "Malware payload (Mirai)", "value": "93556fbe94af405b706ff903249061b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "30ffef10-cd9c-45f0-b340-7cdb9fb9087e", "comment": "Malware payload (Mirai)", "value": "d8d53c10cc9cf1e869fcdaec7a08ffec291147fe86ba9e9b2bcf3603c2a24a55", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "2eed2fe2-79ab-4f78-9f03-8d7a829fba60", "value": "T1A113F177711380E5EB4B2230D8FA7E0D0450F4C5908ADEBA5EC5D9E36928FCEE5A82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "694f2359-ddd3-40cc-92be-7348df1d3933", "value": "768:yODg7lacQ4qY2bU74xRoR30tbIoErIL8XWG1+UYZwujhvv4bDqfjnU2w9uuRnbci:0acTRcxHbR4IL0WdZwkvw/qfjCbRnou7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775887699, "uuid": "b6bfdfad-8676-4b66-a08d-c9737de02325", "value": 42552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "d78a758a-f5ad-4dd7-a4ec-693c607e4d16", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6a7c5b2-356c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775887699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "6baeac8e-d665-4a02-9667-eb9503596d25", "comment": "Malware payload (Mirai)", "value": "182ca1c3436d87a01404bc33180a95db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "cf649b70-ad0b-46eb-bf28-e8a05aad951d", "comment": "Malware payload (Mirai)", "value": "813079082d04bf82dd529fa6f5a20d0e7086d824d69bbca2b107255c51f9ccad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "136b13f0-b3a4-4aa7-a334-32f8e34b98df", "value": "T14A133A1351BD6607C0F8E27D02B35757B1EA765E90909B1F7E3A0ECBBA413900F6AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "4c5e2776-3c2a-4518-8822-ccf4742500a4", "value": "768:b16rlwk75BJ31zURv8j3eCQ7Haukz4zEcpuOOdAdkZcbXtliYPd1:bUrlwCJ31zURv8KCQTaxz4zvsElP1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775887699, "uuid": "acba29cb-b08f-4c5c-be6f-52e20245c3ad", "value": 42876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "ff1f5195-7d22-47c3-96fc-81ee15b03c17", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6a93a46-356c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775887699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "d6120b65-44ba-4d02-b152-16fbffd58194", "comment": "Malware payload (Mirai)", "value": "a29ad0ab7586f9633fde1388386dd585", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "0381ca56-11c0-4535-b92c-ca738d71a019", "comment": "Malware payload (Mirai)", "value": "2f0dc6ab0edb52c39b36d2809e5d5241ef2ef878ab6980920a9df10d6f7bab7b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "3aa6bc00-0824-41f1-be0b-22c1f4a107dd", "value": "T13AE33AC7F900DEBDF80AE37644634805B130BBA149921A377357797BEC3A0E8456BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "5549d57f-c30c-45ed-b0c9-9498a97058b4", "value": "3072:PHPjed1JhQbf05u7xxZKoPJtVjjbiSLXObmhA2y0nmGsNORc:ad5u7xxHPJFLe63y0js8c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775887699, "uuid": "50f020bf-d130-46ac-b7a5-bdeaa359a93f", "value": 156160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "23ae5ba1-f4d9-4ead-a55c-6696e5c58962", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6aba38e-356c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775887699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "926ab947-4c67-4067-b5d2-438f5f38788c", "comment": "Malware payload (Mirai)", "value": "8b2dd98a4e86da75b2bd38e91e99d2e3", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "d1596592-9efc-48fd-b89d-ac6fba7baffc", "comment": "Malware payload (Mirai)", "value": "ead33026ba998d6996cd20438c915e889c40f22cea0b8634458027070c65c4ae", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "1de1790e-1d6e-449d-a4c6-0f277e544ebd", "value": "T1C743F266B21A5B25C3303A77BE875B45238903EDE4BEC041B4FCF8653699ACA733E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "376f7510-bd88-4510-a1f8-f2141f752bc6", "value": "768:ZbZbf4TGoL7AidaJQVGy+OJp+RgPR6Xhtgqs5yU1pJoJ15Tf2rz5pvc0ka9q3UE+:ZbdO9vAiYJQVzeRoyt5Ickrz5p000Lq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775887699, "uuid": "8974f0bd-3c8f-4126-8281-d96de0d5c21e", "value": 55512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "968a6874-44f0-4323-ac50-8210b07cb4bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6acddb4-356c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775887699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "e4463760-3e2f-4f69-987a-b8e7b731377f", "comment": "Malware payload (Mirai)", "value": "0b0a5270a8d27cab8adee7b3bb533a18", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "996c05cb-4b19-4da8-9eff-5cd92cfd0c7b", "comment": "Malware payload (Mirai)", "value": "bca02842e1a54df952a46a252f6d3dd2d910466b058ab8826e3d89339a424359", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "fbeb7da0-8942-479e-92df-be1da06fe859", "value": "T1C433F150F827EED3EB797FB14E1853C8B3F21D9D32519FA6072002675E6A2160A1EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "d4628256-cce5-4ff9-a467-37449f67212d", "value": "1536:aKArwAkU3iMuuNQAJvg0Ys5UNw6/3HL3heqkPv2yt4u+qgw09K:q0A/3iMnQwg0Ys+n3HL3yv2U4u+qgwj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775887699, "uuid": "0b6f0cf7-0a7e-4ee1-9981-c03c9d4ea871", "value": 50328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "ea5f6fdb-14fe-4948-86a0-9d7dadf5d6a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6ae8063-356c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775887699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "7e177e12-0729-4667-9f30-020cd1cc529b", "comment": "Malware payload (Mirai)", "value": "c56be4ec7371a441b09102f2ac848f52", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "17edaba7-7498-454d-9d8d-130e65276150", "comment": "Malware payload (Mirai)", "value": "b540656b69cd2684eb0bb0f610a255c87ba647834aad5bc00f0f8b44dcc665af", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "9d8d63f8-6ffb-46e1-9093-7a2d2b616b17", "value": "T1AB3301B135A6ACA095BC2936B9306153B1A19E15B3CD2E43514CCEF7ABC3E14BBB8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "72c87ee3-3fd9-47b9-9eaf-dbcdd44d0d3a", "value": "768:hRgKgXaN9BfA1q9aFohHOPkooyF1XqHkb5SmJJ3WZ1EUsL0rcnR76XDs3UozO:wKc0Bl9a+tOPkooyf5SmJYfsv1zO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775887699, "uuid": "03da8ee7-7352-4059-982d-80e11f6d172b", "value": 50504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "0da19640-5520-4aeb-bb6c-98b8dfe4589e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6b059c8-356c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775887699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "b18e725b-c1b8-4359-b3e6-da825155a464", "comment": "Malware payload (Mirai)", "value": "52129c56a0290cfb45aa89ddc1f2eb45", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "87306ab7-4edb-43be-b5e6-ffb4dac4e174", "comment": "Malware payload (Mirai)", "value": "8e450350920a77a4433f09a433a610156e85193fb1776ae4c62d016ec62b0779", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "a96fcc45-c4c5-4b1f-8426-05476470109f", "value": "T1F95301B1E2236948C5103E3EE9B4874032493B73BAFD7A72B7994654D8531CAF6883", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "87236edf-c97a-4b83-be38-719900fb3718", "value": "1536:tbNmSv81yIBPQJm+W/Nxu/25JC0L2LG4QkqGHdpxz:VNm9TBPKtONxU2XCxLqkqG9pl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775887699, "uuid": "b824b412-e36d-4ec2-9d7d-bc140361c4db", "value": 62604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "2db73202-f2ef-4e9b-87d7-e2ad1fb034de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6b12d57-356c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775887699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "1c93e3a5-09ea-4479-bc14-d6b49ded4637", "comment": "Malware payload (Mirai)", "value": "5f99be33efaa59895ec199d28f7a0b46", "object_relation": "md5", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "10debb19-b894-4981-b49e-c0f9f17165f6", "comment": "Malware payload (Mirai)", "value": "230ed0a7ae9854426b7ada13914ead5d1c977e6c3dd20a578ae199248edb17b7", "object_relation": "sha256", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "b4390eba-2681-4fec-aa64-46ef3cdfaa40", "value": "T171B3BEEFF34B1590C86187F017C39BED2E6332129E6B99E77C0E263A18751DB490A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "2649ed50-c816-4cf8-addd-7b3e40224a10", "value": "1536:omfH5zGf6VNalWJQ6TABwZaiJlMWb0aB0O6Jgq/LW0:vpGiVNalTYmA3lMM0aB8Jgqq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775887699, "uuid": "2d7e2a92-94f0-46b0-955d-9eb0616df7fc", "value": 107840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887699, "uuid": "063aa903-6e23-484c-a439-0b8824c582cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6b85412-356c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775887700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887700, "uuid": "3804dd56-a9ea-4ccd-bc7d-0ed826eaaafa", "comment": "Malware payload (Mirai)", "value": "fac4e4257384a86ec4697a54f056b8ee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887700, "uuid": "afd03a0f-4170-468d-82c7-d864073980c8", "comment": "Malware payload (Mirai)", "value": "fbe87d54486705f832602f4f4bd9067e5912600ff8e80c76fa6dcfb89aca36a4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887700, "uuid": "737d7d75-936f-4458-9ffc-6c493b5fa834", "value": "T180C35B62CC766F58D658D0B4F0B49F792BA39A1091475FBE556BC3B48007D8CFA093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887700, "uuid": "fca76396-f1e4-4553-a3e5-eb2456bb6bf0", "value": "1536:xadtx6jzKv16dMWK2iyC9FW1WivAW2GBUzVCuKmN20eAus:xo6XC6OWK2BYW1lAW2ALBmrus", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775887700, "uuid": "329cc854-7c04-4c3d-8857-3ace15ec3153", "value": 121476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887700, "uuid": "3d530d99-10e8-47d4-abc2-039eaee55574", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c45c00a1-356f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775888957, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775888957, "uuid": "c9e58727-0d9a-4b15-a087-2d7a6e6d43ed", "comment": "Malware payload (Mirai)", "value": "279c1de5335d1a52ab3950e6bd31f53a", "object_relation": "md5", "Tag": [ { "name": "85-11-167-129", "colour": "#5535c8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775888957, "uuid": "1ab0ff0a-ad70-401b-a282-9963cd33cd15", "comment": "Malware payload (Mirai)", "value": "6aa047730c733a7f155cc3ce1c97e9d11df6c6c616c871e3311974f74c738f09", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-129", "colour": "#5535c8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775888957, "uuid": "bedf68cc-d684-49a3-bba7-7bbe86378ac8", "value": "T1A5F2F1BC2A60A76CC879D3B999B243D09E07174BB1815C0F34AAD9D3FBFB11432172", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775888957, "uuid": "67712b7e-3b3d-40c3-b162-9aafb54893f5", "value": "768:9NYKyukZoTMKezCeB5XFUDctqIApJ4hmXvPjJgGlzDpbuR1Jw:3YdWle55XSotqIAIhmPZVJuW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775888957, "uuid": "aa9c56f4-0090-436b-a490-b70d7f48a1fd", "value": 37068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775888957, "uuid": "1ad9dd57-a402-4957-a2b1-34d1fbf29043", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4df8a58-356f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775888958, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775888958, "uuid": "6d2a742c-2f07-4319-aec5-3d422334bbf9", "comment": "Malware payload (Mirai)", "value": "dbb6b6bd2982f28d96d9b9b37281f742", "object_relation": "md5", "Tag": [ { "name": "85-11-167-129", "colour": "#5535c8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775888958, "uuid": "a983f50c-627c-442a-a0f1-b93f63a11de0", "comment": "Malware payload (Mirai)", "value": "6984cc12c00a60f186ec8be8d4e5630ef4228cc78b0e19cabb5c760b2c9e65e5", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-129", "colour": "#5535c8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775888958, "uuid": "71b253c8-ced1-4817-840a-680c193ac99a", "value": "T177F2F124DC462DAAFF6FBAB55991974037A00F5BF3368E351460CB43090F89A335EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775888958, "uuid": "e0f35683-6b27-4f59-b60f-199f46471944", "value": "768:sk9hrdmlHUKWzb3/fFnYzS1aIzvdFUqbKP4yGCe/Dy4uVcqgw09b:sk9Nd6HKP30sRgqU4I+Dy4u+qgw09b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775888958, "uuid": "724a47fe-314b-46f9-bfca-8e5b09197fe6", "value": 34324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775888958, "uuid": "7ce95c06-c909-4015-b9b8-99f92553dbad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d144101-3570-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775889187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775889187, "uuid": "232d65d2-a5b4-4a68-9a7f-58fc23e06ec9", "comment": "Malware payload (Mirai)", "value": "db5a102f6998b8bcb830493159aa9f24", "object_relation": "md5", "Tag": [ { "name": "85-11-167-129", "colour": "#5535c8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775889187, "uuid": "91d4f83d-7110-4b35-bdb6-baafbc7aa33a", "comment": "Malware payload (Mirai)", "value": "c4af7709afa47f4d98a548518674e23b3b364c9bb2af28f93180715bb2476503", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-129", "colour": "#5535c8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775889187, "uuid": "d20399a6-d09d-4ecf-bf36-a9b7409262ce", "value": "T15621569F3B522621CED1CE0F7B68443C42FCE0E7E95B8A1EC594D82E809F94D3956B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775889187, "uuid": "ef7314c2-7f35-4446-a877-4e63987443c6", "value": "24:SDqXD0iDIDI98DuwDudD1DXEDMDqKNDSWDS04dDkRDk4D3D+DGD2KRD8WD8NI2Dj:OS9/La7R04Bv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775889187, "uuid": "ed2c1bb2-1fe7-415a-8860-c0d465c295ef", "value": 1279, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775889187, "uuid": "0cd192d3-b883-41f1-a1c1-09fc7bf77311", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6f0153a-355b-11f1-bc00-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1775889188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775889188, "uuid": "13480350-dbe6-4cc2-bb89-dd0685b4a055", "comment": "Malware payload (NetSupport)", "value": "1b25c1754f074a59280026e51bd67294", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775889188, "uuid": "4414041a-a05b-47bb-b6c6-c8b7d68d00df", "comment": "Malware payload (NetSupport)", "value": "d32d558613c7da6d2118cbb00ae16627d547e0fde4eb22089a8e7d22d0c612ce", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775889188, "uuid": "15f52d14-d551-4013-b226-38e454d70815", "value": "T108266C17EE6409F8C786E5784823E2C6BE68B400132123DB26D9635A5F637F84777F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775889188, "uuid": "11a299cd-c19d-410a-9e45-b6e5a9c5cf6d", "value": "3271ee162568f50a6810be9b8973807f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775889188, "uuid": "a03ed4de-9571-498b-a15c-2abe2ab169e7", "value": "49152:obyhf1slaxsFNpGOcqDXxLkHI2jgQQcHrqCg:obyuYAXRJR1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775889188, "uuid": "4d606004-47a0-4856-b4a1-8d87952a269b", "value": 4524911, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775889188, "uuid": "ce03785c-f3ef-446d-becb-a2701a98a2e3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ddfae7e-3570-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775889188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775889188, "uuid": "01e11e19-b7df-438b-b406-5fb765914125", "comment": "Malware payload (Mirai)", "value": "44ff7cf4ce9a2811d4e05ecfa9fb0274", "object_relation": "md5", "Tag": [ { "name": "85-11-167-129", "colour": "#5535c8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775889188, "uuid": "b10dea90-75a4-4201-be41-e565583a578d", "comment": "Malware payload (Mirai)", "value": "ca1e8d9ff6fa205be0023f14180848114abd0ab799ae275ae48ce909de9e02a0", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-129", "colour": "#5535c8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775889188, "uuid": "41ba1a38-7e06-42a4-a274-da437c5daa57", "value": "T1F92193AF3B522722CAC1CE0FBB74003842FCE4A7EE5BD61EC994981D846E94D3916B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775889188, "uuid": "c86a09b3-a224-4ac9-aa53-271c985b4735", "value": "24:SDqXDTDIDIp8DuwDu4CD1D63DMDq61DSWDSu4dDkRDkkDD3DtWDGD2KlJD8WD8N/:Xp/Le3Ru4CqUzef", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775889188, "uuid": "57fd079f-0415-4ca6-871e-0eb5101a2e0f", "value": 1362, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775889188, "uuid": "4f6fc70d-2bef-46d2-aeac-72f67d126df4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19d9d46e-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775890388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775890388, "uuid": "7df993a7-6674-4dc2-874f-1f258e3cf928", "comment": "Malware payload", "value": "195e35ce0fad619aef8c8c638f981467", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775890388, "uuid": "ef396233-34fe-4b5d-b08f-80781a9866f1", "comment": "Malware payload", "value": "d5aadfcde4a266619be66a0b06d156f644e151283856630e6cd849adcb51e032", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775890388, "uuid": "301c74fc-09f4-44a3-82dd-c31dbc057abd", "value": "A313028336953F73D1218CF4D7FCEFCAA14A7D94AFD9141BA8113A99B07135C28C982A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775890388, "uuid": "097e0586-0499-4e21-8cdd-b6f40d6bcc3c", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEK:yYI0ARqw1qAEW67UIWi7M8gmJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775890388, "uuid": "dcb8494a-a3ce-48b2-a6de-9eabf373be21", "value": 43440, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c0a4656-3575-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775891440, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891440, "uuid": "4978d6e9-43bf-454d-bdf1-af5a50bb28bb", "comment": "Malware payload", "value": "5664dc9db98d5e15b46a5b2d1bd837d2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891440, "uuid": "e27431af-b731-439f-9c1e-74242e243d7a", "comment": "Malware payload", "value": "841df8438af226558869c0e57e08d7a42d996e7cdca16902cd18bc419ea9df58", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775891440, "uuid": "173da3e0-312f-4d0e-8f99-9e57b73909ed", "value": "T1EE0833D5301A4965587BA033BD42EAC8BEF94DCD500ADF29CB52ED7C09912E2F07BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775891440, "uuid": "a8feebfe-dae5-4668-ba06-8b7dcfa609c6", "value": "1572864:GlQTkTknZO4/Yp2J5smGlKZHH6gvSe6iv/DPJu5wYy8rZ1jSGp:KfInn/U20mGckFe6iv/Lo1reE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775891440, "uuid": "bf266799-bf47-4e39-a082-35ad68127962", "value": 78523483, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775891440, "uuid": "55044a0b-b77c-4240-82b8-9911a29f3f52", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a52b7252-3575-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775891482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891482, "uuid": "059c58b1-81a0-4daf-8a23-0b1cef1925d3", "comment": "Malware payload", "value": "26fea4b76bfb8b2e32b15f5a71c22ddf", "object_relation": "md5", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891482, "uuid": "9ad4c76e-c886-4d78-a599-147690fab009", "comment": "Malware payload", "value": "e2cac1a698a57e1bc11600c8aebc5c6b51696e19d8bc829139daf5455f332f81", "object_relation": "sha256", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775891482, "uuid": "34e23b93-b1d9-4945-8aeb-d99c0d2b4c9e", "value": "T10A483383DAD90D30849F947E4DE2618E26F8F906CB64D9EFF5A7E5EC48050D2386A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775891482, "uuid": "7213b2c1-e1ec-4303-ba62-7f630caf2050", "value": "3145728:cSupetapDiPQhOUjSCObgRcFcLSyr/2J+0a8M:clpetm+QkUagOq1/qat", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775891482, "uuid": "5b5d86f6-bb55-43cc-9395-558817c24099", "value": 114125472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775891482, "uuid": "ebda498e-cbb7-4969-a13d-8163176930c9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "104b5f06-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775896386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896386, "uuid": "034bf908-9c65-40c8-b1d5-b334039e29ea", "comment": "Malware payload", "value": "0443b773904534a27cf6e2670e0793fa", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896386, "uuid": "e9e218a3-b5af-4ef1-9e7d-c444683ccec6", "comment": "Malware payload", "value": "0024da30a0eeae9e648224c58ffe4e8e2d61c07ad1cc2a49c4e0450ce74ddb0e", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896386, "uuid": "aac4d6e7-5b94-46a0-850b-4e08cd93430e", "value": "T117D423453336A5803AB4EE23B7565E1C11B0D1676323D0DFCFA4FAF4B0966C4AC36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896386, "uuid": "dcb5a1e1-1808-4c68-9c25-3d94531c1a7f", "value": "12288:ZDvPb1X+Jbvel9Rd02ipoUAp57nzV7oJ55rUWwDkICINkI:ZDHJqbv4Rd0glpd4bWzlNt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896386, "uuid": "3bee03a3-e382-4511-bdfa-36e177c0182d", "value": 642624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896386, "uuid": "b77e3f89-69c9-484a-9439-6e29b69934af", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38f52eb9-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775896454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896454, "uuid": "9949fc36-202f-482d-aabc-62e7d22605b1", "comment": "Malware payload (Gafgyt)", "value": "3f35f65e07efd0b238f1014e8d268bf3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896454, "uuid": "c08ad2f7-bc1f-4cf6-ac6c-53a98a3eb629", "comment": "Malware payload (Gafgyt)", "value": "5ea7b2e52a8a1843e6d5ec251b803b6bb5b0b9bec65455664740f18ab811ef45", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "4863cca1-f4fc-450d-8176-52d33e8208be", "value": "T143933B56A780D5B3D14305B316979B620033FE7B1A5EAE0AE35E7CF18F3A0987221B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "bf2eac2e-2e33-4027-9ecc-7c781189a232", "value": "1536:mzqmXTbw7U+OU0Cf5UI8E8WwP6kHzgk81VwcG2emPGMUNLe5um7WAgcVjmZIcBI:mz52UVUtBUI8GwPfHkk8rheLesmqAgcr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896454, "uuid": "3ef8ecd7-880b-4529-a8a8-38684a74f791", "value": 96268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "7856f60c-0c28-4490-9164-7e74c00062a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38f65409-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775896454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896454, "uuid": "9291ce00-a0d2-4232-8508-1c8bbd238326", "comment": "Malware payload (Gafgyt)", "value": "0809c65bf81afc6631358d56d8abfa04", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896454, "uuid": "315e2b99-ceb4-44ea-b98a-c6ed77df36e3", "comment": "Malware payload (Gafgyt)", "value": "331f16cb8a09aa942afe48fee5b014d694f4a0619d578c8cad958741ac20844c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "635f3a9f-7290-45bc-97b4-bc80dfae9322", "value": "T122B33B4795A89EB3C086FAB525EB59300722ED120F2F1A9621387BF4437F5CD741EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "d6a86e30-0914-4baa-bedc-95786bad0684", "value": "1536:Aq/W65rWXAiP5dfK4EBbkb25lyDQnAjCJB5+TjgkHmmycgYVLu1IPYC:R/vp+9C4xb2MjO0j/HmDcgYVy1IPYC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896454, "uuid": "2899acb0-03d8-49f3-84cf-6fc9f4bc60f9", "value": 108486, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "d794effa-18d9-42e0-889b-7b30fd456252", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38f871cd-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775896454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896454, "uuid": "ce39acfc-6e59-46eb-9feb-40b72f8bd342", "comment": "Malware payload (Gafgyt)", "value": "c216c0e5d76ff86830616d2709385c6d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896454, "uuid": "5c9b40ae-2ead-4192-8fba-e34c8aa624e5", "comment": "Malware payload (Gafgyt)", "value": "ca644c124b6793a548c810299688de39af6c855bdcda92bfbaa43c204ae16750", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "2384f188-71ed-46e7-8c27-1f3980d664c9", "value": "T1E5B30692F900DFF2F40AE67604C34B2566B0BF660F536A66B21739A79E721C43867F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "06473c8e-0499-4ee5-8d9e-5025eb06773a", "value": "3072:FQWUEK1FSHGfs1QbEE6QyPwTs/avcWVRm2pgYMx3IPtW:FasGfs1QHyP8sSc2Rm2pgYMx3IPtW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896454, "uuid": "afab8b7f-8c6d-43f6-a5df-56fa6c989b3f", "value": 113759, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "5272f272-58c3-4d05-9bd0-4eaf6dcc329f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38f8d185-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775896454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896454, "uuid": "180ed49c-34a2-4ac8-a44b-7487f9041946", "comment": "Malware payload (Gafgyt)", "value": "f89d43c8c5f06855d82c3bf2cd8f4085", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896454, "uuid": "4e1beb64-ae72-426d-9eb5-4e447a1ae4fb", "comment": "Malware payload (Gafgyt)", "value": "d408f3699dff7586e85a733982cebe29748f5ff3511398e026414f0e3f9643e6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "22f7c990-8dd0-4326-98ed-c8eaf89a0cb0", "value": "T1C6C30A44F901475BC3E327BAE78E038C77355E6857DB33156A38BDB42BE1B982D292", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "84cdf9b7-35d1-460c-83ba-59480ace9f52", "value": "3072:H63VpNeuWDGeQf8sRCtt3DxkS2YmyVUQuiXfQd6W:OSuWQEcCtt3ZmyVUQuiXfQd6W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896454, "uuid": "8531a5d3-71c2-4629-b197-30d2335824bb", "value": 127723, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "272a597e-43ba-4bf8-9a4b-d42460f27c53", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38fb4f08-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775896454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896454, "uuid": "17697647-0ba8-40d0-a727-adaa7c58a97a", "comment": "Malware payload (Gafgyt)", "value": "3f9d2fe2541c671cb09fc8ea806b434d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896454, "uuid": "328846c1-36fd-4e44-abb6-172abc80898e", "comment": "Malware payload (Gafgyt)", "value": "4886b007766501738fac2c7d95899f325de78b87e6bf33636e35022d59286316", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "f45e2869-9082-42a3-b20d-a4ab4bc70642", "value": "T181D31905F460876BC2D217BAB64A425D37231F7893CB33256A34BEB42FE1B981E795", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "6e5ec8a3-5934-47de-ac11-399f1ff8e286", "value": "3072:Sdf+fvEqa9FazYA7IboRhke391CErktmCQA9FX9aH:ifWEqa9FaNhke3DrktmCQA9Z9aH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896454, "uuid": "40b3482d-8063-4b83-8ad7-ee5ab61bf994", "value": 139585, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "129473e6-1137-4b05-83d8-f6f487b50cb7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38fcefb7-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775896454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896454, "uuid": "8e0b8e71-803a-4112-991e-9e771a6e9269", "comment": "Malware payload (Gafgyt)", "value": "9f5e95266669e97de06a23b7a361013c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896454, "uuid": "bc6a7d52-3fbf-4336-ad2d-de101b5e4944", "comment": "Malware payload (Gafgyt)", "value": "deb8d67350f8a8798f8047d20a2ef78718075e32b82d38952d791c437bdf8580", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "04f5c617-4e5c-4a16-b5cf-729852bb2853", "value": "T145E38266BB619EB7D80FCE7309A64501218CDD4642D93FAFB2A0E51CE76B84F08E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "a3b479f2-5d1e-4d8e-8c7a-b187e9a29e92", "value": "1536:bVeTpqCVvWRYx0O9vPBysZgvsgxqAz/0ufMytVgpLtaoLAImlP+s4zWfOodW:byvWmBx+sK/PflegImlWs4zWfOodW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896454, "uuid": "d97e74d8-a8b0-4507-a067-18b4d8d02966", "value": 152201, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "c4e6f33c-7d7a-4556-a16f-5557af99fe13", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39007cb9-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775896454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896454, "uuid": "7822c174-fc09-4372-9464-358e63c20525", "comment": "Malware payload (Gafgyt)", "value": "cd8a6eeb9a5bbc6360e1d162d175a323", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896454, "uuid": "1a0cc4d9-aec8-4cde-814c-cbe51a4ce683", "comment": "Malware payload (Gafgyt)", "value": "bc5b11bb3c869b9a0d4daf066660a34521869f5a955b44d1f58e683039eedb79", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "ce628dd9-907c-4c3a-a083-330722bbb0a4", "value": "T179E3966E3E21ABBEE16886310BF76F70C39529D636A19342E16CF7185EB124C1C5F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "48c5b733-a93b-484e-87a3-fe830f3328ee", "value": "1536:mVNs7K797V+nv57gbj6l6T6B6v6N6/6AePe1ebeZe5bwClA2rKQA1dXAQTI/e0hF:vY01ZkXAQT4NE9//ImlWs4zWfOodW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896454, "uuid": "9dfff421-8868-431b-a3d8-0685a822a8cd", "value": 152121, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "e49233dc-de37-437a-8ab2-901e21cb3cbd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3902f4da-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775896454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896454, "uuid": "28744c94-2ee3-4b0f-95f0-14468170c2d0", "comment": "Malware payload (Gafgyt)", "value": "c3b4637d55e8074ce5f01004610bdd8d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896454, "uuid": "d31293aa-e0e8-4134-8876-3bc9cb8d7c60", "comment": "Malware payload (Gafgyt)", "value": "57b80957748c76fc8d2ef4efa49b3a62fd95834ee48b5b571fa8d7f3183c1381", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "b22c9b98-eb97-42b2-9e8b-1478fd33bc4e", "value": "T1FDB31813B7B1DABEC08252B12BDB92F19423FD7D0732622B33957DA51B388D96D593", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "433cef9c-3a05-4946-9499-b78da6bcee00", "value": "3072:td0wrSAewzi+Xn+8Uhw6W+aPKJmDk1c8xF6KjW:7fO8IBPJmDk1c8xF6KjW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896454, "uuid": "cf849d7e-a9e2-4cb0-ba4e-a4525c0973e3", "value": 114825, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "d29cd9a4-8785-41cc-af00-ef45c3c4e227", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3908d458-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775896454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896454, "uuid": "505bd21b-3867-4f01-9d4e-e613f38b9b37", "comment": "Malware payload (Gafgyt)", "value": "49f8c106792131f3d2692cf799630596", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896454, "uuid": "41d187ed-29d0-485d-9ea7-f8d994fb946f", "comment": "Malware payload (Gafgyt)", "value": "cf96d4999b62e7778a3ae6a32d6dcca7f0fa832f2c6520e475edbd104a739117", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "221d5ecc-cf56-4181-b244-a38e359e7334", "value": "T19AB328436B1C0B87C49B9AB01DA737F18B69BD7112A351C9A90BFEC04733AB81527F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "1042d832-2813-4d70-8dca-9170331e8216", "value": "3072:WD3l+XQzPeV91310pWudkKakpNDtm2pgYMidIP1W:WD3l+XQzPe713CpWCkypxtm2pgYMidIQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896454, "uuid": "aa05c7e7-8f9f-46eb-a3e4-77b71380ec59", "value": 113194, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896454, "uuid": "c01b31dd-6bc9-4a96-9589-27b1e7252fd9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e5a977d-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775896517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896517, "uuid": "f4a73d08-9e89-4c84-a65f-76aace3de4f6", "comment": "Malware payload (Gafgyt)", "value": "d5748b730509ba018ed884efbc6928b1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896517, "uuid": "80efb9e7-2099-4aa4-8931-f488b123ce47", "comment": "Malware payload (Gafgyt)", "value": "805f6789f61452ba21938664d171c61c4a6f37dba2eb714d4c11afd1a43feabe", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896517, "uuid": "4eedf056-0790-40b9-9753-459a6e598f8c", "value": "T1CFC30A45F941875BC3D327BAE74E428C37355E2897DB33156A38BDB42BF2B982D291", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896517, "uuid": "a45f3f52-8436-4497-9469-d4da9c9495d9", "value": "3072:hQrFRNfuLrGhEPOD0eg3gNlmBoHQuQekQnYW:IFzuaEGQeg3CmBoHQuQekQnYW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896517, "uuid": "5f8e0b57-3102-4adf-af17-295f2af54837", "value": 120177, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896517, "uuid": "b6b87c3c-1237-4ad2-a521-b78144d42761", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e618a22-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775896517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896517, "uuid": "111f9c74-8f0c-42bd-b296-bc02059cc9e0", "comment": "Malware payload (Gafgyt)", "value": "5e6fff8a6eb39d228fb8947de4305800", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896517, "uuid": "d3214604-65bd-43a4-a865-aeff6edd58ba", "comment": "Malware payload (Gafgyt)", "value": "18356277a213d154eb44012df535e6a6d1e5fdc3c852bc96a956726aef19ad5c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896517, "uuid": "75e90b0f-9922-4039-bed9-213e3e5fb926", "value": "T13AA35B8AD743C2B3CC530AB2124BA6AA4621FD3B092E9F49F7197DB09F374C93125B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896517, "uuid": "53b3d180-f97c-4c6e-b571-97f1cf61f02c", "value": "3072:sWCjQrLpnr85EdT9Oa8vqbVr7h/CEgmqAgcVyZIcBI:sf5EdTbpr7hWmqAgcVyZIcBI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896517, "uuid": "9b533e97-b233-49af-b460-bd34bf857060", "value": 99084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896517, "uuid": "8238ec96-5bb1-41da-8407-34b60bb09a34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "841e4590-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775896580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896580, "uuid": "ca9a26a2-3aca-4288-96ee-e8a337bb44be", "comment": "Malware payload (Mirai)", "value": "70ace99ef8f3b9350063af10303bfd92", "object_relation": "md5", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896580, "uuid": "a067e8ed-bf5a-46e4-9039-b6b78e6039e7", "comment": "Malware payload (Mirai)", "value": "ccde5501dd8c94605aeb236841fd8d6588e9423caa384945d2a6a62919bec9bb", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896580, "uuid": "af8d7b49-c3fb-4fed-afea-ec17c8d52207", "value": "T14D31418F65F102A1CACACE0070E14DDA67EDD9D1F398463BDD81AE76C09ED483429A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896580, "uuid": "e3c5c89d-680b-48fb-a09f-d9beef6bb08e", "value": "24:VDdGe18RyBM/hiD1bP72wM6fgo7sgKDJ/4nH9:Oe18Rlo7sG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896580, "uuid": "09a0c504-d53a-45da-b3a1-7959d20808e4", "value": 1873, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896580, "uuid": "737708e2-605a-46f2-992e-0a953521ed59", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8422c3db-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775896580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896580, "uuid": "8daac03f-1075-4f58-82e2-71fe2f9481cf", "comment": "Malware payload (Mirai)", "value": "6434bb6764a86c74c8c837108598d47c", "object_relation": "md5", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896580, "uuid": "619d5454-a252-453b-b67a-73c845dabad7", "comment": "Malware payload (Mirai)", "value": "c6fc981d6fc7fc2e4b2a28fe58db5f0f9484a06e98f3e94b314e9bc325018997", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896580, "uuid": "88e67336-fc4c-4e82-95e4-6bf2dfe871ba", "value": "T122D308C7F900D9FAFC0AE7374853080AB230B7A549925A372257357FED7A1990477E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896580, "uuid": "541f9a6f-b4ff-4619-ae56-8b55f0252f85", "value": "3072:wSbul4MGHJvkrybLutTK/OwpiZdDoOPVO6V1jbiALNHFIyx:wrybytG/Oyi42VOgLNZx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896580, "uuid": "cd95e566-1e29-454c-8e53-d753f726b5e6", "value": 140064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896580, "uuid": "ff846f10-396d-435f-a15b-a6de84717e56", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84239904-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775896580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896580, "uuid": "106045d2-61fa-4940-adf7-33b10c422e34", "comment": "Malware payload (Mirai)", "value": "d4595abe30c8e9833f681e531369bdbb", "object_relation": "md5", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896580, "uuid": "8e9a3ca3-d8de-4018-a1ca-d93c1c5fbc03", "comment": "Malware payload (Mirai)", "value": "bb8ae922e4436d0f332bdc6e57c3455d6925403b17f6e0a2f1c503141904d077", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896580, "uuid": "acaf10a5-b70d-45a5-9273-6beb0b2ea262", "value": "T19EE3B71A9F910EFBDC6FDD3302A9060635CC954722A43B763674D528F64AA4F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896580, "uuid": "d9ac7e21-5de7-4b3f-a353-77ae59e393c4", "value": "3072:axjJw1Cc/0s6YAPwenUr48pzfR+JonZy:axlw1xAop0YfRZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896580, "uuid": "43d3bc14-2c41-4682-b860-b5857e0ce213", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896580, "uuid": "08f30bf9-0511-4e0d-8a20-eeb733999efb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8423d278-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775896580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896580, "uuid": "5209eacc-7277-4443-8bbc-707933142691", "comment": "Malware payload (Mirai)", "value": "40a83a43960420d23e8f1c22103c000e", "object_relation": "md5", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896580, "uuid": "af2b4f26-816e-475a-a53c-393a47b66085", "comment": "Malware payload (Mirai)", "value": "340a6acbca701bb09732445e64abe24d2cf96038ab26ba021c49b33c3ee0cf54", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896580, "uuid": "90cdf489-4456-4d54-b9af-87d463148c8c", "value": "T1FE333C4DF783E0F0DD4B0531115BF77E96349E025124DE7EEB98BE66AE32A02711B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896580, "uuid": "d26fee10-6e4f-4ef4-8fbd-4531cb8f2604", "value": "768:RwzbCo1eCZWUJ2SSpRflrFWwqTlFNB5azjYvzNeVMU2331ANA0B7RhuqDV98LN+s:Rwdt3SpOzwLMU431ANA0BLBCvr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896580, "uuid": "ea126525-c1a0-4ab9-b7ac-2ba1386e1298", "value": 50476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896580, "uuid": "d687c8a2-8f84-4417-b636-fc321a4e90f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "842d2a4a-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775896580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896580, "uuid": "b7e204cb-ca08-49fc-bfbf-9bad0eb0f4e2", "comment": "Malware payload (Mirai)", "value": "5096f96fbe3b14d93d5d2aa93225012c", "object_relation": "md5", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896580, "uuid": "a0c6b640-9669-4b2c-9997-52198313096e", "comment": "Malware payload (Mirai)", "value": "0951aa8d3d886f907873c0f912845f01f0ae7e08338c634e0f188c72021ff900", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896580, "uuid": "4a7a0b29-a971-414d-afe6-7631f91025bb", "value": "T1F2F33969BA0F6C41F2C2D3F9DA8C87E13E1735E3C6778DA1790252EDDBA39D949805", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896580, "uuid": "b12f97bf-2a23-4c7a-b83d-a8c182652652", "value": "1536:GdMiHrrc/qDHavM5Dtrg89RPA4b1X75rgmnX7Dy+IfMpAEn5p5M/LW:I7vDtrnPTR71gmX7Dy7fMpAxq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896580, "uuid": "42c6d04c-5d55-4801-bf84-5dcbcf460087", "value": 157544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896580, "uuid": "50f1b382-6eab-4951-a6bb-02eea7d07988", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84347e71-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775896581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "c5f6f1bc-bb67-4e8c-bdf0-6e37066a4904", "comment": "Malware payload (Mirai)", "value": "9df43d23f01c46593c5fee68bab481aa", "object_relation": "md5", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "a51ef05f-9f8c-4860-93cf-089a957dff98", "comment": "Malware payload (Mirai)", "value": "0f02a738f46e178daaad029fcc173b213ca9c503becc90656f83527878aa4f90", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "2336d29b-3557-45d0-9298-ea51a8e28659", "value": "T1C323E14BE1176590C279ECB76A1C95D4CCE3F82273591FCF00D775AB5AF68F00AA0A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "1109f4d8-ce1d-45fd-ae04-84ef4b3092ec", "value": "768:ow7ka59WXVJViF3Zeb+vDFTxCvXgyApeWfGLTV12YtRrsRF952huuX28kSj+jIKv:d5MNiF3wqBTxQwyAUW+LgzSmnj8w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896581, "uuid": "590b4b49-82f4-449c-8474-f4f2d11319f2", "value": 47768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "3e2ed020-d969-4f32-85ec-908b3a8eebca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "843517ca-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775896581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "8a662704-736f-4267-9562-0963890041d5", "comment": "Malware payload (Mirai)", "value": "6841d85c2a1e3b6dbd548a68396a9518", "object_relation": "md5", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "a7162d92-219a-4e29-97e5-3cb857392490", "comment": "Malware payload (Mirai)", "value": "20cbc7d98f23e14ae43c1d573fd789ce9670f8d43b582635903fead08382e37e", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "85544c32-e631-419a-a5b7-a50832d11836", "value": "T18214C70A3A228FEFF56D877147F34A30976976D627E29684E26CD5101F103CD681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "a6dbe035-608c-4f52-ab51-86fc7f5ca948", "value": "6144:456eQCbeoufx4Ndf2dp06GtCqjYW8nY1j20WI:/ely4Ndfap06GtCqjYW8nY1j20WI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896581, "uuid": "153fb574-d579-41c0-9547-837efb2a47ee", "value": 202077, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "e83615ff-1903-4b5c-aa9f-58559010bbcd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8435f49a-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775896581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "e2bd93c7-5027-4d20-825a-7e1e3bd2bb27", "comment": "Malware payload (Mirai)", "value": "74bc64749320aec191fb63947d22eaae", "object_relation": "md5", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "5bcda07e-c2fc-4d81-acce-f8564b3811a4", "comment": "Malware payload (Mirai)", "value": "98caf242aacb958df3757e671697c9a04bfc2590264afa370d0523e11171bb37", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "c3940808-e614-47f5-ab72-b08e26bbf3e3", "value": "T1B0C32A05B30C0D47E1633EF43B3B27E193DFDA8121E4E640655FAA8A91B2D32558AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "b7f9de01-377e-489a-9703-f78efc8b2ebf", "value": "1536:6wB72AZ4ex10JrZqQ7UrZb6wI0vAnjiLVRuzae8Dhq6N2te5f3dBJ:6iB4exMF7oZKJnCNYa7J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896581, "uuid": "1716b4b7-0635-44de-abe1-9a15eec26b2b", "value": 121508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "01330d5b-7851-41de-baff-8dfb3c4f54eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84365aef-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775896581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "ab83f889-b375-4e92-8182-7750730e0c75", "comment": "Malware payload (Mirai)", "value": "3647179ccf7401edc67c891e14efb9bf", "object_relation": "md5", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "75666770-86c5-41b7-9507-42bf4ee98f8a", "comment": "Malware payload (Mirai)", "value": "de850bd8d6d0b865de0d67fe0ea8c2db4c87c84672969153d146ad517d0f0954", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "a3e9f472-00d3-4217-b650-1598a47d244a", "value": "T107B30945F8445B17C6C666B7FF8E438D7B2A1758E3EE720399256F30378B85A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "dc26d9d2-51bd-4ee8-8561-72036428ac90", "value": "1536:j7jnPq8azP4V8YOTIBRvyNOzIuSIwYeFWd/lk68wywlQ3Ym3Tb/V1oEakCxX:vzPqF41OUBljSIxecUtCd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896581, "uuid": "bf6bf2e6-5af4-4df3-bca1-a9de9c0b9587", "value": 113184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "76d27e64-06ce-43d4-a9fa-c3f1476eeecd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8436f63f-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775896581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "8695be44-fade-4bb4-b3fa-2afc79478a27", "comment": "Malware payload (Mirai)", "value": "852b97e098069232a6ebe7346e0c1fb6", "object_relation": "md5", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "452de51f-dfa9-47d6-9b03-2f8d58eb3605", "comment": "Malware payload (Mirai)", "value": "227e8735bdb5c5e5e5bfde90c1d33ddffe7ff1436be3d7090c47a50bbec7a1d3", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "bf508acb-0f6c-4c2a-aeee-3af90694bd63", "value": "T199C30956F8819B11D5D151BAFF0E124E77131B3CE2DE7312AD24AB307B8A8BB0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "cec16809-501f-44a6-b9e4-c8d0ecfacc08", "value": "3072:foD7YhjFMX+maR8TcDeRqQV3tNQYciYTG1Q:foD76aX9aKTcRQVnoiYq1Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896581, "uuid": "162cd2d2-68c0-4b6a-ae52-ac30fad3d724", "value": 129244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "2c95d1b0-fb02-41b9-a422-be21b15f9a74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8437ad57-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775896581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "cec4445d-be65-41af-a095-aeb9888ab528", "comment": "Malware payload (Mirai)", "value": "22db549fb79b5573f6c627cab87ce494", "object_relation": "md5", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "bcd4ace1-c39e-464d-9c7a-a24cfee54a33", "comment": "Malware payload (Mirai)", "value": "28aa64e3f357e0838fb4f2baf0bfed18715973d9eebe3c57607b018f821ed02c", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "b3c47eb1-a1d2-4073-a9c6-1805c159d0e8", "value": "T134E3885A6E228FAEF67C873147F74A20976D23D623E1D684D2ACC1141F6038E545FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "d8c6ee21-7c49-48a8-b184-0c805a220f5c", "value": "1536:p+vTcKot8sp2MKypYz8ZOfGQ+v3eB/hub8mXRCTUGk4onuftL4VxRdbK:pYlybKpzEOfGQ+vEubTt4ouftL4NdO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896581, "uuid": "4f86872c-d8c2-41d4-a912-92f8983523b2", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "954b9377-f848-4857-9b2e-09a1a3c3379e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8439a465-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775896581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "f4c2fff3-2e5f-44c5-b677-112b18feb0ef", "comment": "Malware payload (Mirai)", "value": "7aee895fb4df044f2e697e2c7abe7608", "object_relation": "md5", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "80b3ab00-94ab-4f1a-bda4-778ce070b4bf", "comment": "Malware payload (Mirai)", "value": "7f5b422a58ebbceeda8d20f2d9b69d44e85dc9e815cc63a7d9abd902bd9e7491", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "baf1ce51-4d23-4e5b-aa4b-a65f2220188d", "value": "T1CEB30945FC505B17C6C652BBFB4E428D7B2A1768D3FE720399256F30378B96A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "0e7134fb-503a-4a5d-a5b1-bc74da407655", "value": "1536:tUK9yqnU8vGRz4VA4j6T9y28Ty6O5FtZpqQcZlCtwywXvqcVuafhPeA45ZvA:2ixnUHz4Z+5ypkn3E8A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896581, "uuid": "dd543a61-09e1-4db9-b471-e2b2a6aaf42f", "value": 117280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "6cba7291-8735-4316-9c72-838f82342bb6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "844860fa-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775896581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "6491414a-2ea6-4c57-adee-335c2df187d0", "comment": "Malware payload (Mirai)", "value": "71bf718c7e6ecdea4aaeb8796bfa5881", "object_relation": "md5", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "10502323-e100-42c3-8658-0238c5d8b686", "comment": "Malware payload (Mirai)", "value": "1a0757bf4864c6ae5f4b6697368152b6c8f4dc755063d86e50c409d2baee8f98", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "8daae059-e32a-40cd-a0c0-a47f72180353", "value": "T12DA328A3CC766F58C628D5B4B0B18F796B93AA6081475FBE1567C27480C3D8DF6063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "cedcb563-0193-4a4a-b190-354cd2d8192c", "value": "1536:7xufPeqU2CVKCsNV7lsLPC9z+NzWuBx/3RhyXA/:8bU2RC4kPCtSzWu3/3L1/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896581, "uuid": "02bd06ae-a041-4b98-bcfe-5af3a34fd270", "value": 105056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896581, "uuid": "4658b290-8a7a-4b90-b63e-5aa79535b58f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4dfb7f6-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775896635, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896635, "uuid": "83ac2206-46b5-43b4-86d0-8e3e8850aac4", "comment": "Malware payload (Mirai)", "value": "3191ddd7e514b90fe427b0688f9392f7", "object_relation": "md5", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896635, "uuid": "c32f82ab-9ad9-4641-9351-e15e513930d4", "comment": "Malware payload (Mirai)", "value": "b0fa3aa1926fb19fc629cc51f85223f18ed2405c43456fbd28e3908070b8f1c3", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896635, "uuid": "e3a6fd6a-cd42-42cc-8016-5d82ababb22d", "value": "T1F232D517A7BBAE1BC4D033770193072162E99F916024472FBD0D1C8E2E9A3412D3EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896635, "uuid": "da4d69fb-3329-43f3-b5f5-6395febe1bf1", "value": "192:xvrOR1CQOsz1NxfAzQH9iG0GhWaDpU/O7Q89AGSybLqeif:xvrbCzfaQ2GwIU/kwGSMUf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896635, "uuid": "40b3d950-0225-44bf-b3ca-a9a68b2446fc", "value": 11024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896635, "uuid": "a0245ee3-24a8-4daf-92d3-b19afc8b797f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4f9cb38-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775896636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896636, "uuid": "1c85376a-634f-44d0-8b0b-fc4f66b21868", "comment": "Malware payload (Mirai)", "value": "361d509b8857166f54cc32c02758afdb", "object_relation": "md5", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896636, "uuid": "96ea9279-6c48-4b82-a985-8c83f4fa9544", "comment": "Malware payload (Mirai)", "value": "2e710a10ca0d4b656c7216d7e04e7c35be6c2d6fdf79904a02c5e490cea101d0", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896636, "uuid": "d60dd2ea-aff2-469d-b6e8-f7a84855233d", "value": "T116930749FD406B10D8D635FAFF4F024973934B6CE3FA7201AA245B2523CAA6B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896636, "uuid": "eea427db-7ad9-44c5-907d-8b311f3566a4", "value": "1536:wqnZM8D4zgUdtS0tFbvacgzafVAweBuqKlUI9HiWNRIbT2gZ1YDn:U8NUv5nTacgzafVAwe4BNRIbT2gXc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896636, "uuid": "a87aa813-15b1-426c-85ba-7113b9779496", "value": 93252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896636, "uuid": "419e2e38-19b3-45ca-952b-3134880297fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4ff87e3-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775896636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896636, "uuid": "4ea5e609-0f56-4b75-96e9-abea360977a1", "comment": "Malware payload (Mirai)", "value": "382178e04c6c5e143556d0e9f994e5a1", "object_relation": "md5", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896636, "uuid": "e2808206-806d-4c84-a229-c1d32b6bddb7", "comment": "Malware payload (Mirai)", "value": "794f310c7608ae4d37e5adc1e81e24df266258221b75bbae72143aaa0f972fb5", "object_relation": "sha256", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896636, "uuid": "6a8672b7-1da7-49ef-b23b-db9b2510beee", "value": "T1A4C39DABB24F1051C82647F41BCB579C2E3325019E2B9AE77C6E373E1A369DE58063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896636, "uuid": "f527c418-12cd-4194-9d26-2910247b5a0f", "value": "3072:Mf0GQgHfg5nBR4YYSOxTKB6Aq7mgbgiCrheiiU4kqe:Mf0tJBR4NSALD7rnCrheifqe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896636, "uuid": "4fcfb688-15ea-4a21-95d9-25a3ee2610de", "value": 124344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896636, "uuid": "1167460d-aaa6-4973-9cb2-73b9c2d25925", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee3ae86e-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775896758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896758, "uuid": "9510c003-68b9-4aed-b956-fa0f8627576d", "comment": "Malware payload (Gafgyt)", "value": "fd24e61f06ffb8ba759da7c920db263e", "object_relation": "md5", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896758, "uuid": "571966d1-ad00-41b1-b0c6-fbe5288ddf95", "comment": "Malware payload (Gafgyt)", "value": "16fe582641f2fdc51c4dcffc184486eaf214b722b049ff16d5dc4abf0f747eb6", "object_relation": "sha256", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896758, "uuid": "dd853e42-c749-4586-a96f-7aa4d2f8f8c8", "value": "T1773132CF22E20EB0EC91A93732AA884475D4E1C754CA5F597CED39F6469CE157440B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896758, "uuid": "afc9d9b9-f77b-45b8-a726-48fdf0a377e7", "value": "12:q0FS8V0FSG0FS2c43fX0FSsAeekX0FSG0FS5UX0FSze0FS0fX0FSzi0FSol0FSJO:vt+ITc4kfAasYHs8bXsY35OZaFRKDb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896758, "uuid": "c1fc1ad5-5ecf-4366-a16a-f1f1d408499e", "value": 1574, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896758, "uuid": "cdb7090e-e41a-438e-acba-8de19db8342a", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12dacf9c-3582-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775896820, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896820, "uuid": "1cbe214c-af4b-402c-af2d-b09a8f8dd9ff", "comment": "Malware payload (Gafgyt)", "value": "2be0da0a98ea0328fefe46f2f8e3e914", "object_relation": "md5", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896820, "uuid": "670322aa-4018-4cc0-84a6-5e429716fa64", "comment": "Malware payload (Gafgyt)", "value": "f20209b1d9dbe4825f4e3e1e78729e43edaa19078197f3e6b6ede92ac95b28ce", "object_relation": "sha256", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896820, "uuid": "7f4d4db2-46e0-4cec-b8e2-5de8303f61ae", "value": "T14AC3093B6B270A23C0D9507102E31332B9B9DE5938BA43D7A9D07D9C6F3A58834567", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896820, "uuid": "2e6ce42e-c2e4-49e6-84d7-c3d8bb47ee64", "value": "1536:ctrv5GE2dFg8aI0DN95P8tf7PJtA0Rdc0sfm7ypwYujl3IdnuW:ZP0DNPAV5sfm2pwYux3I5uW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775896820, "uuid": "913b0e6a-5507-4cc0-903f-7fd16232bd4f", "value": 126446, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896820, "uuid": "7630ecb4-26d7-47f2-90b0-e2cfca3a17fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4351ebea-3586-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775898619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775898619, "uuid": "93e7ffc7-268b-4f4e-85d1-7aea0fb73764", "comment": "Malware payload", "value": "56c7916816349aebe450a16257b8448c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775898619, "uuid": "01348ed9-7d5d-41a4-95c0-14d0dcef34a7", "comment": "Malware payload", "value": "fcbde44de84bd52312b5497108ff960b1c3b83a1a760535571dc7e3676e8b708", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775898619, "uuid": "dbca3859-019b-45b1-af50-176cac0e1588", "value": "T15F81F68E235281F96C48ED17F471DF9078D09DD20DDB8F88CECD6B52A58CD647439A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775898619, "uuid": "c3ecc791-f4c0-4d53-9048-bc291d233d1d", "value": "24:faHhTshhdYgEhqmThP/R/Wh/EECEPhErQ8QpjhQpfL4h+IvIshICIqI3hIDIVNIy:EQ0T6/Vjgchwsy/H3yEVuVSyVNv0++", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775898619, "uuid": "df513783-7800-4603-9c43-8755ef3da53f", "value": 4029, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775898619, "uuid": "155cdedc-db85-4990-9fc9-e5c006674b0b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfcda83b-3032-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775898726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775898726, "uuid": "5d98686d-45b0-4c3b-94d9-a85898370e2a", "comment": "Malware payload", "value": "963648b9533afa95b569b58ba2fe78f7", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775898726, "uuid": "be41cb8d-eda2-4bc5-9732-6a2e1b040109", "comment": "Malware payload", "value": "219d879522b3cfc498ab3e2597dcce3b96c41e7f4154fa0205922f1f283f71d3", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775898726, "uuid": "4ac2cc08-3d66-458b-8113-4d87f31d7946", "value": "T1BB4124FAB8628E30336DC5BD748A654CA7569AAF49172E74F043743C27BC32470742", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775898726, "uuid": "8578474d-69c3-4a12-b2b4-250dfda821dd", "value": "48:vkwvpihneZZn1oBydXEBtonmzEvJGU6ljiPq2MTCki:vkwYheZZK8a2mzIj6K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775898726, "uuid": "289a13ca-6050-42fc-acf6-3ba9ee5fa0e2", "value": 2081, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775898726, "uuid": "b77fb211-4c8a-4fdb-91b3-48f157a82123", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16287d1a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775901564, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775901564, "uuid": "3418def9-4e7c-4985-9833-30fe5e67438f", "comment": "Malware payload", "value": "ee9986b9d1c62cda420b671c6def4efe", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775901564, "uuid": "ebeea993-e88e-4b8b-ac67-c766f06fce05", "comment": "Malware payload", "value": "20c9c9e9153564ee44ab7fa7bdb571956245c08859844048df1e8b8771505eeb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775901564, "uuid": "c1e5ceab-e8fc-49c5-a431-76a93d125c0e", "value": "E123018623663FB3D13158F5E7FCEF85A14A7D94AFE6180A7C227698A07135C28C8D1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775901564, "uuid": "40ac80f2-a23a-4af4-9b5a-fc40380bc123", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsK:yYI0ARqw1qAEv7UIFM8oJorFK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775901564, "uuid": "75aeb698-0edc-4007-a929-23e5b96bdd4f", "value": 49232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0c61779-358d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775901890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775901890, "uuid": "61c1d756-0186-4f21-adec-cfe25ba0ce27", "comment": "Malware payload", "value": "5294f25631d20b68ebf3a9acd4cc1f5d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775901890, "uuid": "1587bc4f-2a46-4e60-a9cb-f87924e27e97", "comment": "Malware payload", "value": "a505de0af54408dcde2f869608398a409908543a43fad15397a342b2200f8a52", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775901890, "uuid": "5230e42e-3f72-4c07-aea3-c546b80b8f5a", "value": "T19E06331581EA41EC80D88DFC9D152EF38F55EDF028FB0484A9F7E69208F79D297929", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775901890, "uuid": "de6fbf81-0800-4b66-9f3a-b53bd3d59564", "value": "98304:zenAd0WS0Zelbevq7hwc8UthyhjeomOwsb3Pu:zenAd0W5ZwUJxhBwMu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775901890, "uuid": "87b86687-0846-4ddd-a6c7-fd230b391cda", "value": 3716336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775901890, "uuid": "48bfa0c3-73b9-432c-a4c5-552657a27791", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775905524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775905524, "uuid": "8880fe1a-c439-41d7-a602-2ea4da0989e6", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775905524, "uuid": "dacfbdc6-4a07-4056-8c1f-f0d8630f7c21", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775905524, "uuid": "53c98836-5f89-4f00-a8f9-5f9db0792ac9", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775905524, "uuid": "06d9a030-2c87-4536-b932-61ae0a7e56b9", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775905524, "uuid": "f884ce2c-6ee2-4778-8f96-6ec2908f7627", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a06441c-359a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775907167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775907167, "uuid": "1a9546eb-84c9-4355-a190-560776c0905e", "comment": "Malware payload", "value": "df580fe69a18f2007621a395d6b7a6a4", "object_relation": "md5", "Tag": [ { "name": "MalGeneric", "colour": "#31c2be", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775907167, "uuid": "00fd3e9b-4012-4ac3-83c1-fd9b2edef023", "comment": "Malware payload", "value": "8663c4e5ba4668f0a3f9f59af069882627d0d43d905a51f34b688b45e5347adf", "object_relation": "sha256", "Tag": [ { "name": "MalGeneric", "colour": "#31c2be", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775907167, "uuid": "78022572-3f5d-4fcf-a12b-a73178961fba", "value": "T16338335EC0D8CEE0E966514BB2A1F1B522F757AF49622D1B70E207C586AD7F3488DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775907167, "uuid": "94362c01-2e59-4443-b38e-66317b8d790e", "value": "1572864:a2n9XVSQexDKqMcfOtzOOexTTYpVu+kh23xnJEFabHktTFv/Yhk7oNmXx8TlIo:a2rSQOwENYvBjxyoaZvt7oUXuT7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775907167, "uuid": "0ce30f70-21e4-4f8f-9c83-cd47b11dc0af", "value": 107816408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775907167, "uuid": "658a65b3-f6dd-4d06-a5f0-737403a6d30e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0af74553-35a2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775910551, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910551, "uuid": "c9176de0-e09e-4456-ba5e-3b7095b522d3", "comment": "Malware payload", "value": "d1f03ef0b0f98bbd9e52e8013985d801", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910551, "uuid": "9f71a14a-6c31-4f56-b4ff-aaa5f319d6fe", "comment": "Malware payload", "value": "53d6fcad33718a4e75a9cd1204f3d741c075e584d41ab3beed7ab807c751ebb9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910551, "uuid": "fe26abc6-6216-423a-b5c5-3545b2134159", "value": "T16B541240DF580527E9675DF49EFF176AE30D1CA040BBE46A480CBB9A15A3EB3C2873", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910551, "uuid": "218e0abc-0e31-4d6d-b751-bfd213e7f392", "value": "6144:ZuZPHvgFjkeUGKUxcPMxLGTo6SoIQSfV+PaPODQ3esccoxsO:keU3WcQLGTXvSfVADQOxiO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775910551, "uuid": "f8643290-c1f4-46df-961b-f103a5b9f7b2", "value": 289075, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910551, "uuid": "5c6746ca-c6ed-428e-918a-8ad410f2b43d", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0afab20e-35a2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775910551, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910551, "uuid": "c0851dcc-ca69-4560-aca6-84946276a132", "comment": "Malware payload", "value": "6b632343d3ea150e0427e697f772476e", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910551, "uuid": "772c46fe-fff0-4326-ba38-a790ce84a08e", "comment": "Malware payload", "value": "42361899a38f8aca537a7004b75848af1a8b94d5f061dfe62e5a25ff1361737f", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910551, "uuid": "d42f29ac-42d8-4869-913c-eaff70685c02", "value": "T1D8440271F5C0EB6AD7C002BBFA4D118273520338D5D972068E64AB697BE7A730F359", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910551, "uuid": "e8de463c-7c00-4340-acc9-40e0acae7a33", "value": "3072:2bUdM6QbvRB4LoVBSRTUO4stRKaJz2v3mOgvOnr0vowuZhFdo1wDSOLPBF2b6oBD:2bcQbb4LABA4stRKngvg0QVielMQdGF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775910551, "uuid": "56474f3f-3691-4c22-88d8-81d0f8516d3d", "value": 254005, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910551, "uuid": "e362e796-66c7-4138-aa94-0e0fd9638b40", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0afed82b-35a2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775910551, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910551, "uuid": "e5a888ec-4f75-4b4f-97bd-2a2c74fc78a5", "comment": "Malware payload", "value": "f5ea76cef9e7589ef807a3c3df7a7f49", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910551, "uuid": "4c94d040-9d66-431f-921a-796abe074cf1", "comment": "Malware payload", "value": "a3b97c95eb07e51588c6009112021739679f6c96c02ee5fa0154800e271c58dc", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910551, "uuid": "af84485b-b46d-4392-bc70-7f98e6e5a576", "value": "T1383412EDF4445FA2D6D5173DFABD40883363832893E9710A9E115E383B5BA018E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910551, "uuid": "7c842ad4-b65d-4b7a-9a62-e9f5b25948e2", "value": "6144:m9lCt54OknftqM5ofV9vMfIzjz/E63lLVi2+PjtJSmjUe6oU:0luWff8M5ofV9vMf8zcgL8pPj6mQpj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775910551, "uuid": "12f667c5-d255-4e15-9eaf-9d8a44e0d7c7", "value": 251184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910551, "uuid": "cbae581f-99fb-4273-b6d7-7904320bc81b", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0afef281-35a2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775910551, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910551, "uuid": "df383d85-eee1-4b13-935d-500f074deff5", "comment": "Malware payload", "value": "2c3f532e6436400003d6a0257de7818a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910551, "uuid": "51bf89e5-ed8e-4fdd-ae2d-2ce69ffcf731", "comment": "Malware payload", "value": "e0f03c6082e97e5da39d14ede2ae678040a5664ab99fb4ad7c09b2b5349787d5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910551, "uuid": "629c9862-3d7c-4285-b2bc-4066f62c813b", "value": "T1696412827B518FE2C76A823601F39891FBE516D216E2E55A772CDC11EA413CC943BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910551, "uuid": "3781b512-d121-411e-b0da-da8629dcb5c4", "value": "6144:aIr4FgpCKpC8k6SuEYbMUo5BOvziJ96gfssuFyYH+p2kVm:+ap/pC8NJEYbMl5BgCs/FyYH+phA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775910551, "uuid": "535d67d4-b3cf-455a-b6d5-d3f9d505cdcf", "value": 325228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910551, "uuid": "8c7ae630-c50e-44e5-8320-4cd7ba79f21b", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b0591a8-35a2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775910551, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910551, "uuid": "ddc0356b-52f7-48d5-98ff-e5828904fa9c", "comment": "Malware payload", "value": "9a61d7fbb5b11f5e3503d56e4be0adef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910551, "uuid": "c185e698-bd18-4e37-9174-fcbfcdaca69a", "comment": "Malware payload", "value": "7a6b0a4886057acb016beaeba100f02dc0e07948328aa715176ec5d3519ed464", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910551, "uuid": "40c6bda8-9575-4a59-8e70-b54fda69a8ad", "value": "T1B964125E9AD60FDEC47FCD344B17036B238944AD93E2761613AC9D5CFA8C6884AD7E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910551, "uuid": "4a45d77a-3aa1-4389-abe1-8b0d0757b3a4", "value": "6144:PLJDT65zMT64RpADJ2089FCw6gBqVEfbtGw3ftl0cdIlDM654oAbd345C:Foz/0agbFj6gACbtv3fticdQY6aoad3B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775910551, "uuid": "803ce3e8-3601-4ac0-8d50-f9324e137ef5", "value": 326117, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910551, "uuid": "40ae226f-cd81-4e81-896b-4b1301700149", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11867933-35a2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775910562, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910562, "uuid": "9548fe93-8047-4b58-8c4f-0deac8d57a40", "comment": "Malware payload", "value": "db7f38118bd0a8e55524c8624f038102", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910562, "uuid": "cf747639-ee00-4101-83bb-3cf3cb6c7d54", "comment": "Malware payload", "value": "ac740c8217966493091cc64df41660b2a82fee11d335ebe7dd4394a5ce267d30", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910562, "uuid": "7235e070-ea0f-4155-ba5a-1e14c3e65704", "value": "T154440221F4908F62CAD2A57EFB1E124937974378D2E97314AE294E2437F2A074E35D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910562, "uuid": "60c8833b-7d27-4869-8f3a-7c3991c8b840", "value": "6144:Sw5Qbb4+dscgKvj8hkuHnhOy+TagmjBuqRdwYfgr:z5SE0d8hVH8a20S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775910562, "uuid": "697971b0-5895-4453-84ba-08f608380f40", "value": 253851, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910562, "uuid": "a9614cc0-3819-41d3-8a4d-8cfed6efcf03", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "118bcee7-35a2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775910562, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910562, "uuid": "86cfe887-f1e4-4860-ad62-0655414d7640", "comment": "Malware payload", "value": "efe4f68f1aedaf66ea00f85049f2bede", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910562, "uuid": "58c9e89e-03c1-4d6d-9073-b9e5aefbe668", "comment": "Malware payload", "value": "d6e12c00ce5286cb6c25fd6e00eb392d7d3832d03023a2b34b5019cafaf6e422", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910562, "uuid": "4d286295-9357-4c81-a9f2-09852d7bf2f9", "value": "T1C3341245F5C290B2E6C386761147FFD7E2B1EEB10411DA3AE3483272ECE119DD8D9A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910562, "uuid": "70d0fc90-8aa8-40b0-865c-d8ec5c79d9b7", "value": "6144:qj5Aap9xUEM2LRorKmm8FuYZZ3y03x+IURtden53R37h:qj5Aap9xUEM2LCrH3FuAJ+b4n5hN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775910562, "uuid": "ed0e278b-ccc4-4fcd-995b-e24eb37f425f", "value": 247203, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910562, "uuid": "7a4e5d5d-9b70-413a-9a1b-6faf2f27a1f4", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11953a89-35a2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775910562, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910562, "uuid": "33e044d4-cdda-47de-9e28-97f23d1536e9", "comment": "Malware payload", "value": "ed0ec2155f101c9ac2f12fd2733ff5b6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910562, "uuid": "375f0876-aed3-4e0b-a3d5-5a4a8ec80a82", "comment": "Malware payload", "value": "fe4d28d73055f7aa6be7c4095dc7e6c567a2559a456a941864af37ca1ab0167b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910562, "uuid": "0617da03-a3e2-4240-acee-829c7545601c", "value": "T1B3341251E5C2D2B2C2830671188A53E7EE369E391018D597FB4DBA11F9927DADF0FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910562, "uuid": "1689b664-846e-42a3-848a-fc01230a5dba", "value": "3072:/0i2YNQzeabh6U9/SAsuRH6UzTixQNpOQeZ49y9mf5/zcW+WAXSQO19agxUqTiha:xroRhP5H6UHixQNQg+aaWAXSH9a+iha", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775910562, "uuid": "aacd59c9-76d4-4770-ac24-54760e4bc391", "value": 248749, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910562, "uuid": "3a5da676-add9-4b48-be15-83cfabd4c86f", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "141069c7-35a2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775910566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910566, "uuid": "48ff4687-a13d-4257-a2dd-a74122197fbc", "comment": "Malware payload", "value": "ae783bf47a69c7dd8db121005cda2545", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910566, "uuid": "a8d0da73-f9aa-44bc-9227-49b63087bb4b", "comment": "Malware payload", "value": "bdbd85f5cbf7ae7d5d39d660d612e532400ca7132842e22048992c25af7deb28", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910566, "uuid": "b3354a21-4743-41e1-89e4-72b2f1b19686", "value": "T181341249E1C3EA79D0A381710B16AA9A4374FB31354DD710E3492E16EAE3F97B3D86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910566, "uuid": "a5a8d944-fe92-49e4-b115-5394219b1739", "value": "6144:xroRhPqaAmDtEBuPg4GvnXfAP1L0E/7IsyhnDxZhOM74jlCucq8Va0U:xroRhPBA+EBuI4GvnXfa1L06HiH0Tdcs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775910566, "uuid": "d0a2bb81-64a1-42f4-b2be-9dd569d8a8db", "value": 247669, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910566, "uuid": "e38ca9be-e77b-4356-90fe-ecfbbcbc9d9f", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3347a916-35a2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775910618, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910618, "uuid": "8c2af916-4530-476c-b47f-88be8f7fd7e8", "comment": "Malware payload", "value": "5eb2a82ce415366bbf1f33b4678fe3ac", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910618, "uuid": "919e2698-5fb4-468e-866e-841344427e48", "comment": "Malware payload", "value": "e56200a486dd02beaa7aab0560df4fca2725546c30a9b77deb7d2a43c33091d3", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910618, "uuid": "1f08b865-25b9-41fe-8c9e-43c5794ba9f1", "value": "T148341255F8C0EF06E1C2657BFAAE569837074B7CE2CC37039E194A2437DBA664E3A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910618, "uuid": "c1b31c3e-b49f-4db3-832a-d60d568d5721", "value": "6144:6Sarbs4uLXW22fFyejbp2Iw4ShiyQGIehGn4ShAZ/KJwHYo/2:LaH7uSFyeR1w4LFXehGnvha/KJ4Y22", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775910618, "uuid": "25fa7b4a-9a4b-4db1-b1b0-05c900f45596", "value": 251025, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910618, "uuid": "b2af6386-aedc-45f8-91bc-874ed5449fd4", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b59cebf7-35a3-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775911266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911266, "uuid": "ce0564f2-7291-464d-ad3d-cbf9496cc488", "comment": "Malware payload (ConnectWise)", "value": "243ad45b8e8f8cbbde4143b5ccd7f4e7", "object_relation": "md5", "Tag": [ { "name": "45-83-28-4", "colour": "#fb304f", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911266, "uuid": "784cc725-0d3f-4281-b098-534f94a2069b", "comment": "Malware payload (ConnectWise)", "value": "3cf2350bc8ee44b04f224cdc446ea1e4f2b2894fdaf8d3c5374777e412f17927", "object_relation": "sha256", "Tag": [ { "name": "45-83-28-4", "colour": "#fb304f", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775911266, "uuid": "cc07c106-a0df-4965-8fc2-a82fe3b3ec3a", "value": "T1C5647C11B9C48432C273383147B4E2B28DBDB8302D655B8F57A81D7A9F745D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775911266, "uuid": "3ea483f8-ac81-463e-ac74-6384c1018758", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775911266, "uuid": "cc5a9b6a-8726-4efd-8008-947c580aa581", "value": "6144:amlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:p1iw7gryNkSV1hy1Z1u2JLu9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775911266, "uuid": "7bff2b7b-b6f3-4a41-b42e-7b00005f5b30", "value": 312536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775911266, "uuid": "37b36f4c-90c4-4a63-9e60-05e04822b19c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78d4892c-35af-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775916318, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916318, "uuid": "69adb7e7-cf95-4ca0-8028-b684a4a3e26d", "comment": "Malware payload (Mirai)", "value": "d37efef1594fc57b697ceff4e811fa3f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916318, "uuid": "a7340430-924a-4109-a481-a837553cf6bb", "comment": "Malware payload (Mirai)", "value": "81a7362a89e0a01d423c6d402ff21ffe0e3d472edbbb6fbd35b602e08040c75f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916318, "uuid": "d329d08d-3308-4bf3-ab38-443c88237cde", "value": "T1DD833B17F5929ABEC0F5D031476BC031A772B4A152325B2B6B98533A7D43FA41F3E8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916318, "uuid": "061538c6-8df4-414d-83bc-95ce869d3e4f", "value": "1536:uUm6maiamXsDaAIxyH8HrJNM0EMoDHDKvCXNgCEk:uUmaid8DaPxTH9NbyDHDyehE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775916318, "uuid": "88b5407c-778a-4a48-8333-f68c3af6d2df", "value": 88736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916318, "uuid": "8fb5a1d8-633c-4e74-abb2-46bc1d930fc2", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7903e382-35af-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775916319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916319, "uuid": "fc53fe41-3ee8-4234-8822-d2fccb410470", "comment": "Malware payload", "value": "897da3e8c18ec47fed583d7b70fe67ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916319, "uuid": "627b116e-282c-4214-b19f-1d97fa465f7e", "comment": "Malware payload", "value": "eaaa8ee155b1edd7d2dd4f684c21c04d6cf204e6d28b31e8c016c6df2ce674f1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916319, "uuid": "fe919d34-ebcf-4dcf-bc18-3c4cfd4c1d1f", "value": "T1B3468C03FCA155AAC0EAA23589739152BA72BC491B3163C72F50F73C2EB6BC49D797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916319, "uuid": "9c9eab2e-588b-4e92-9854-96e81d32ae93", "value": "49152:d86AqE+R+u/SXnMJKOzYPlyLT2boSVX9+KqMxiirqKWK9KITX5Egt93NaoJcc37W:dHV3NRcdVt+HQ9FEgLJWJbt7m+F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775916319, "uuid": "e658933d-6f48-46f9-b419-bf7f378b18da", "value": 5819107, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916319, "uuid": "8814df68-7c38-4ee3-a2cc-07730d1e5d57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f03375d3-0334-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775916319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916319, "uuid": "2e72c707-63b1-447a-adad-0fa8ca86a45c", "comment": "Malware payload (Gafgyt)", "value": "5e1f1bb71c779e1b74649666de4d414c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916319, "uuid": "cb38eae7-9ae9-4ac6-83c9-9627c0c6fbe2", "comment": "Malware payload (Gafgyt)", "value": "0f070694f5431d94b73d3b31e7738f198c43bc01ec62404f2b22134dd28aa34e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916319, "uuid": "9f529705-3729-40d2-a098-be43bcf98f9d", "value": "T1786629D7B9924942C4E43B77A8BE81C432621EBA9F8612176D05FE3C3EBE1D90E357", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916319, "uuid": "a04d95d8-f6c9-4d05-90e2-7780e4668dbc", "value": "49152:X8aNzsObKFB5N/TvNRLSX0PNW5mwXnR13E5/ii5ohpoH7o5Z5EW:X8FF5N/pReXZi5rH7wEW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775916319, "uuid": "99604d9b-9e42-4746-a460-7268ddfd2382", "value": 7078036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916319, "uuid": "c6d55687-6c89-48b7-af42-462c7833241a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d828a19-35af-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775916380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916380, "uuid": "8e64e118-66b7-4813-9827-e8c28c24b3b3", "comment": "Malware payload", "value": "2f5f22342f77d9b3a521698d3b60c62d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916380, "uuid": "08e16672-29e6-4a2b-8d74-3df26f02c0ae", "comment": "Malware payload", "value": "2dbb5c532feb5be2cc64f61bd4697322353aaa6de9b203ca71a421b473cdda7d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916380, "uuid": "39e91663-2688-45b3-ac07-23d7f5f48090", "value": "T193A31917B9419F01D5C321FAFA9E514533136FB8D3E97112ED20AFAC23C69DB0A766", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916380, "uuid": "e7eec0c3-947a-40f8-a6ff-8b695ffea164", "value": "1536:OUnNOoWDk86bVhZDaAaG5bkvhBe9lNXilO8G9gOYkT8k0hWpLi:jOE86BhZDaAaG5bkKUO8G9gOZ8lkLi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775916380, "uuid": "0c0847f3-7f50-4257-965f-a3d3ae3879b5", "value": 99344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916380, "uuid": "d423374c-fe33-4c55-b250-1c57eb90194c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27c4f781-35b0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775916612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916612, "uuid": "36e4357d-7757-4844-b0c9-2cbba8eadc32", "comment": "Malware payload", "value": "aa5cec3ae751276336059bd56ccbf310", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916612, "uuid": "679f0c9b-4944-440f-86be-9c655f092d3e", "comment": "Malware payload", "value": "a050da85bf79761096f7f8680bd5c6608d23989d52da06e58f8a593969b87777", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916612, "uuid": "63444c7e-4642-4717-8c13-1e2aa3e44a70", "value": "T16D517589F0282C747B698FB9BA679741E1C8805D5C0EB51CE0DA5CE1B45D280336DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916612, "uuid": "45110ca4-0b98-4fd2-8c8a-7fe61b33a96d", "value": "48:GC6XR/VxNt8yR7ONp8ZaiX3fEuHFz4/zL6eCKADjE9hUcI5Sw8WOcg:bSR/Nt8y1ONp8ZHPEuHF0/KeCvPEs2cg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775916612, "uuid": "f790d993-6233-4cbf-a168-0f3de25f46b3", "value": 2986, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916612, "uuid": "e21e99a9-75ec-4d0b-a353-7d755571c074", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27f4e49b-35b0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Ladvix)", "timestamp": 1775916612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916612, "uuid": "5734b21d-f9a3-469d-aa55-c82ab63afcc6", "comment": "Malware payload (Ladvix)", "value": "a9174c15b4ac6d1eeafc1416aec87c40", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916612, "uuid": "69eac111-f4b5-48fc-8e36-38ddd4558d40", "comment": "Malware payload (Ladvix)", "value": "e71cffd0ef65adef9d73cc1c5f83ed7d8af1d2c9fad48018c568bb5e08a888df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916612, "uuid": "2695c822-edfe-44f0-8964-7635f3493b3c", "value": "T109C58C47BCE058AAC0AA96328976A1967B71FC490B3123D73E40B37C2F767D4AD397", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916612, "uuid": "1dd10dcb-9f15-432d-9012-396f27dd885a", "value": "49152:66mZdQVJ1W4mBTSX4oyF4pi9WsR2YBWpF9Mt:rp0JxVzFmWhQY0e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775916612, "uuid": "ed488406-6a8e-4c98-b442-2de354f00d64", "value": 2599434, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916612, "uuid": "ba3a555b-a5d7-4c61-a5b4-88807149fd52", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93bcbff0-35b0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1775916793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916793, "uuid": "10929f06-47bf-4163-92ab-0957421e6ef4", "comment": "Malware payload (Gafgyt)", "value": "8107e8a3260010cfc9ef8a91d988f671", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916793, "uuid": "d6e533eb-a164-47f7-b4a5-5ffecbb2410c", "comment": "Malware payload (Gafgyt)", "value": "7cfbf7d4e815e03c27b8f2f3326a78edf0f4e8a5800e2bd684162c400dbef97c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916793, "uuid": "6a6d02da-dbda-42df-9842-eeb0943bcb52", "value": "T17924BE97B20F1491C8AA02F84BCB9F5C6A2369078D27C5EA6D2D663E3B735DF18153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916793, "uuid": "3b6d19db-4968-4083-9ac6-a1a451dc71b9", "value": "6144:ElGo4TQsGmkIrNBS2fDeqmlOXMaue/TIrKtFCaC9RQqa:ZfGQrreqmu/PIr7D4J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775916793, "uuid": "78c7105b-a23b-4e30-9857-552e70a204be", "value": 223148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916793, "uuid": "13d4f661-2d09-4c0c-8f11-5b07bfff90f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb34c568-35b3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775918228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775918228, "uuid": "85a99dd5-aed5-45b6-8756-b0327e4e7a7f", "comment": "Malware payload", "value": "0346de5c7584e63a65c7e3e591de4d62", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775918228, "uuid": "4f962be7-641d-41de-8f56-f6f098b822cb", "comment": "Malware payload", "value": "b177e05670a027fdef9e81047cba02828b8993e990d31af219598487d6455460", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775918228, "uuid": "7a7f87c2-7def-421a-89c4-8f12254a2ef5", "value": "T199E633742902D4F76C2EB0621F444D54BE48CA32DAEF4E6C0F75F96FB116384A0A5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775918228, "uuid": "739ab555-82f1-486c-a5c9-8102d635f02f", "value": "196608:AzAF6y+CxHzBzlhx4sKwvkxS8QV5D7h1rLjl34KOPcF+Eul9+eHMrCMyCo5+efN7:nFNxHzjBKwv98CDFBZ4QHrCfhXbDP3vF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775918228, "uuid": "bf38753a-f1e2-4153-86ef-7454f5977d91", "value": 15224191, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775918228, "uuid": "c84f10bf-c023-449a-ae17-9a4d9aa56b1c", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14b789b9-3515-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775918287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775918287, "uuid": "2108a2f4-fccf-46cf-a187-6c6e2e867609", "comment": "Malware payload", "value": "dcf04df282f98a48203a51e9b79b4d46", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775918287, "uuid": "3a588ce4-571b-4dbd-b9f8-c576b66c3f75", "comment": "Malware payload", "value": "716d698765e5bc3f936f7d28edc5b47839dfe8568a1311a57d2f8dbf73654b7c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775918287, "uuid": "3bfc6d3d-c50d-4902-b60a-bde6463cf090", "value": "T141C21949ABE806A2E8BF0B356D72468647B2F0866523C74F09CD948B1FF779049127", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775918287, "uuid": "2fad5389-a28f-48e5-b2d2-9ecf3a9d3c31", "value": "768:Y/0WS84xSf8JebY9c80FQr0BdpkvorjXego:Y/0nxGb85m9rjOj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775918287, "uuid": "4a3134ee-6f90-49ce-8fd6-1197d2b4bf4b", "value": 27648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775918287, "uuid": "89ee170c-2ec1-4828-b81f-72075cc9d9fb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87ed8531-35bf-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775923216, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775923216, "uuid": "090c7239-03c5-4d1c-a1bb-16b7ecad1df8", "comment": "Malware payload", "value": "b1cac2dd7853cc91338dfe6e6083d6ec", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775923216, "uuid": "0adde339-d596-4874-b439-97e4ff096c68", "comment": "Malware payload", "value": "8e45568c48fde8c3e1390d43414f67c452b76ae95f7aa97b4ce09bd078d2aded", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775923216, "uuid": "8bd28fbe-5531-4475-93dd-4cdcc828655a", "value": "T12B93E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775923216, "uuid": "1865ba08-d942-41f4-937e-7f5d5f29272b", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXWIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775923216, "uuid": "3b4d474b-558a-41a9-9484-eadf38e92fc3", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775923216, "uuid": "37c241c7-629e-4dc8-ae5e-7dcdeb80dcb6", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "229eb058-35c0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775923475, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775923475, "uuid": "25065058-2edd-4c63-96c1-3bcd6553b946", "comment": "Malware payload", "value": "25a29b18d98aef8fdb045e0036a0ec55", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775923475, "uuid": "eb00b57b-90dc-40e0-8d89-7b040c2c1041", "comment": "Malware payload", "value": "1c8df2cdbd3bed37ba873cc0235ca869479afd229be55f80b16a7f1ab0368a0d", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775923475, "uuid": "1bd62466-3c84-47ae-8bfd-4a35b07d301d", "value": "T166B63373F5C223B3E01F94308AF21F232D3C6956CA642857FB5A861A6E519E63E713", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775923475, "uuid": "5efecd3e-070c-4c4b-b401-6ec80db6ae5b", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775923475, "uuid": "ba7d8273-45d7-4c9b-b104-5d2aa1e3e0fb", "value": "196608:T6eq3NZxr3KgXWq1o6Lk1dGBAiUmP+TwD3dzNRpLvC2f/QkcsDSjwEwTUWJ:eeq3NZRXp141oFUmmQ7v7f/QOrTUWJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775923475, "uuid": "09659b0d-cb3e-4ddc-a697-0e96f1694b54", "value": 11418624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775923475, "uuid": "213b9b60-b766-408f-b61b-228915631fe2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bab48efb-35c0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775923730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775923730, "uuid": "1723e1cc-484f-4e63-b0a6-9e4ff4884f65", "comment": "Malware payload", "value": "fb2fe74172dde3c62fbe7666baf67c40", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775923730, "uuid": "c4face8a-2305-4b85-acd4-8992ce61c121", "comment": "Malware payload", "value": "eae2480c86b77a360b158a803f7863057724c81cb2fd5c5894f898b0aa63689b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775923730, "uuid": "09a6470b-d013-4b90-8b0b-9c2036815967", "value": "T19C55236231D1E2B3C07A493004E18A758B7A245B9B76A1CB73ED57F95E103D2E3772", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775923730, "uuid": "1819b275-793e-4421-a9f5-21e943781f23", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775923730, "uuid": "5776c77c-f0ea-45d4-9c34-cb8dc8e11c40", "value": "24576:Rk70Trcrpr/sz/WAfS6YK1s4iP7MajtK5sAzT4ZYBYUVFEoZkdkzlLQq:RkQTAaTzXn2PQ2Y5sAzT4JM5w6xQq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775923730, "uuid": "5554743f-6cfe-4e51-8804-79e87e238868", "value": 1306112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775923730, "uuid": "a0bb30a5-2f31-4cca-80fe-bbc3a4e170b1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eafb2344-35c0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775923811, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775923811, "uuid": "4a124ff8-a7cb-4474-a3cf-212909a9676d", "comment": "Malware payload", "value": "c95a5a512451650cac5056e6a57f7b68", "object_relation": "md5", "Tag": [ { "name": "agent", "colour": "#cb166c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775923811, "uuid": "7d5bd250-ec76-4fa9-bc3c-aa8adc477c0b", "comment": "Malware payload", "value": "1b776aec0bd504464c34eff28acb0d0a9284ca063cd9a157d6735ebd12b4c385", "object_relation": "sha256", "Tag": [ { "name": "agent", "colour": "#cb166c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775923811, "uuid": "53c243ed-298c-432e-a942-7ce055bd7325", "value": "T151773388D3ED4070ED7F60778840688962E97A6E6F3C8E14D65E8BE844EE591CC74F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775923811, "uuid": "9d01f8d3-0cf8-44e6-afa4-57b83417c397", "value": "786432:LqB1pohI1k+AkjBzXbCkFjnlsml4tqS/aFkQQ9gFCE9oOHVi5:y1WhI1kcFzLCkFrlBMV2kQag0A7Vi5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775923811, "uuid": "a654da94-fd0a-4244-bfd2-f3f6b906f411", "value": 34418397, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775923811, "uuid": "61af8e2e-7e52-4a1e-82cd-5503b8a1e861", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a2b1ad1-35c5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775925582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775925582, "uuid": "9e593958-4106-47b4-b5ea-1dc5269d41c4", "comment": "Malware payload", "value": "6dcc4b5cd26dbb0331c6ff322c46fccf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775925582, "uuid": "61be3f09-dd1f-4152-a826-2b928e4bde3a", "comment": "Malware payload", "value": "1ab55f10f35f65f505aa87684c5221d1e12e5c9c484b0b74354ae4896d39eeb1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775925582, "uuid": "cec4c07c-d1d6-46c4-9f4a-370c404a1c53", "value": "T18D931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775925582, "uuid": "55ae9c13-7946-4620-bfde-13a9fb7f1326", "value": "1536:0Byp1tF/uwMmAIa14oXx+IMepeV7tb73WdxCrCitkb5fv2v05xsprCKcB1sPyKWe:08jIL0GitkbFv2v05xspr+1sPyFt3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775925582, "uuid": "73cf4f1f-bd40-42ea-950e-03a5b42129c3", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775925582, "uuid": "cf4fbad4-f424-4410-918e-34b96bd3aea9", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13e9a8d9-35c5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775925598, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775925598, "uuid": "aaa32695-e3ec-43d3-95a3-1281f2d943b0", "comment": "Malware payload", "value": "92a370c27a2a8702b8138d9750c826f9", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775925598, "uuid": "aff5ba52-518b-410c-a50a-e7bebafa7cd3", "comment": "Malware payload", "value": "0fd1c492b37de5f252aa037dc2dbb2a148779e036f9cccdfab4d4b2825094717", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775925598, "uuid": "24c8b8ea-bf69-4c58-a798-6b6ec53a5073", "value": "T1C7E068D4209B04D680D81D5F72B7A408A9CA9B4ECD0A6FB8BCADB0A7A768E04D0C60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775925598, "uuid": "c47d21a2-9623-4def-a36c-106089c2deb2", "value": "6:xLgLW4Mv+iFnT7vZsfuaIuOA9yDB2/vXUgoDu/oz+Q7ZYL4Tyr:OLWDvZWfIuz9yd2nXeDuim", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775925598, "uuid": "bed661db-d316-4d33-bb8e-f4e63e039fe6", "value": 417, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775925598, "uuid": "14899135-7f5a-4f51-8c45-8a6d54682fa9", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a05e422-35c6-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1775926252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775926252, "uuid": "4a240d8a-14d0-4592-878c-332835f545c0", "comment": "Malware payload (ConnectWise)", "value": "264780d89b0f86f920f46641cc4b397b", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775926252, "uuid": "a7262c14-9a36-4505-8cad-1e48d9d56212", "comment": "Malware payload (ConnectWise)", "value": "ee061601444aee6d914be525a5d917adcb4294f83edbd5fba11d762b5cb813a2", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775926252, "uuid": "a9e0cdf6-beff-49a0-b97c-05161c7578fb", "value": "T1EE647D11B9C48432C273383147B8E2B28DBDB8301D655B8F57A81D7A9F745D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775926252, "uuid": "7b7c92bf-0334-486a-b446-4200c43dd6b3", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775926252, "uuid": "07a41c25-537e-44c7-983c-dbca97dc3345", "value": "6144:imlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji98:h1iw7gryNkSV1hy1Z1u2JLu98", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775926252, "uuid": "f7dde9bd-6d93-4e57-834b-a3c677220935", "value": 312560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775926252, "uuid": "e0c55bb5-eb7f-45a3-9213-eb718377522f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc1ea8c8-35c8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775927195, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775927195, "uuid": "d98b5b51-cf01-4a95-8dd4-c5e70ba5f61e", "comment": "Malware payload (Mirai)", "value": "e2a883b35b094ce63315544ee8f66877", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775927195, "uuid": "b132f4c5-7170-44e3-9351-0bd5b6f96b5e", "comment": "Malware payload (Mirai)", "value": "5905918ee6de9875209ffc756b520b30962f4e7f1f65aed09220e15b60553a96", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775927195, "uuid": "5e9d0ad9-f882-4c7a-9d04-d6a23af86cba", "value": "T17E143A45AA408B13C4D62BB9FBDF424533339B64D7E773069528AFB43F8679A4F225", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775927195, "uuid": "f5430a79-504b-4de5-9d77-7a2dcc254691", "value": "6144:hh0S5gT/bHd/aDvUBak/X3j8EEb1bh3sM/RQTOk:3ibHd/aDvUBamXz7gbhR/CTZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775927195, "uuid": "0eec7827-3f46-4409-a902-cc2b8c2da17a", "value": 200065, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775927195, "uuid": "cab94eeb-9f7f-4676-af03-5880dda290d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38bc8ece-35c9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775927378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775927378, "uuid": "c637cf9b-a4ac-4df1-a240-98549d5dded8", "comment": "Malware payload", "value": "1668cec8e4aa824a34c3123314f590a1", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775927378, "uuid": "ea42bd62-5fcd-4f2d-b155-6e45c5bb5c4a", "comment": "Malware payload", "value": "195fdd5f1baea01151f3f3d7e4093b7ab812a70f0a7b3c8d07746b135b2a2aa7", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775927378, "uuid": "8246180a-a66e-4289-ac25-530ef9077fad", "value": "T1FE0402E7F310427BAD79C8AB7B1589C960E9BF2043E070A1FF8AB8959464747E0747", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775927378, "uuid": "ddc8f017-01b7-41ec-b3d0-626a39fa3b1a", "value": "3072:ldDzHlirv6nS+IGNXl8pQruQSS/dq2m7cHWF1nd8Pfw7:/cYOpQ/wACt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775927378, "uuid": "c26814fa-8919-4aef-b856-a1e5a4f31731", "value": 174137, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775927378, "uuid": "a7d24b91-8911-43b3-bf57-2b55a1e405f7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1526012-35ca-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775928036, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775928036, "uuid": "2386417c-e1bc-43ba-9459-d1a90a4af446", "comment": "Malware payload (Mirai)", "value": "f2d5b95929a067d4e7164dc7d473b98c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775928036, "uuid": "db11c373-d077-4d0c-83b7-06b260ecf397", "comment": "Malware payload (Mirai)", "value": "622e1bbcdff2b189093d0772ba39a73c7375993dde9c91419eb9f4cfcc71113f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775928036, "uuid": "dc731c81-ffd3-48f9-aa8d-d92ec97c7a16", "value": "T1DF33F191B6F11FA4C5D5827541F00F6A3DF11B102192EDAE38CB998BDCC6EB7B8D68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775928036, "uuid": "5aa0eff1-239c-428d-81f8-6cff49d4cd61", "value": "1536:jVT6DCwHqLXO8fC+dUFL415b6DCP4PVJue:j2qL1dUS1N5IVQe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775928036, "uuid": "87ea4d64-9191-44b4-8b55-0270237150d4", "value": 54960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775928036, "uuid": "df8f9bc0-0ee9-4148-9391-9d060a12b8f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "202efaf1-35cb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775928195, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775928195, "uuid": "d8b3c109-dd4d-4362-a605-02d41ca81a31", "comment": "Malware payload", "value": "770b0e3aff492c10bda6767147ee9273", "object_relation": "md5", "Tag": [ { "name": "Adware.Downer", "colour": "#fe1fdf", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775928195, "uuid": "969c44c5-cdd8-4828-9598-53b35d3ae9f3", "comment": "Malware payload", "value": "86de891df6c26d02eca15688e28306cb8425d08cda53a7f26cbc7cfb25a4943f", "object_relation": "sha256", "Tag": [ { "name": "Adware.Downer", "colour": "#fe1fdf", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775928195, "uuid": "67271646-8744-4f76-ab08-1889bce71bad", "value": "T1FA03955AC17B02AD340BD4B53BA1678732E0612FD749E81DBFDCE5140F46DAA8AD2B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775928195, "uuid": "babc5921-c50a-4bf4-a896-d44fed0cb520", "value": "768:o4rFlFaOrFEFa81b2m2ri+NFlmM3D7xPIaut2:H3z2jl2m2W+NTD7lIaut2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775928195, "uuid": "616ad26e-b586-49fc-8350-5cb27853d9be", "value": 39843, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775928195, "uuid": "930424db-79ae-43c8-96b0-53869d6dfc6f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3230f5cf-35cc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775928655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775928655, "uuid": "f6a095af-7d10-40c6-9a5c-4177b1801fa4", "comment": "Malware payload", "value": "550a634455ba17afcccb0de1a708b0eb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775928655, "uuid": "326fb93a-1e1c-41f4-a2fd-33db5c91c2a2", "comment": "Malware payload", "value": "dcb60eba203256f4eb697dd1714a8671b88d9120df87ca23db354440036af52a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775928655, "uuid": "d74754b5-227a-43dc-9463-4821db4b4eab", "value": "T1FA8309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775928655, "uuid": "664eacac-ea50-4c3e-b456-ed5813aa1d6e", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnIWaHVN/:XEKltp9txAX/yr2pbIWWVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775928655, "uuid": "48914fb1-7b96-4ef4-87a1-f0f6873bbb43", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775928655, "uuid": "26bc8582-3e05-4540-becd-49e9ee364c7e", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1739fd1d-c217-11f0-85ba-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1775930802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930802, "uuid": "bc05a42f-0a5f-454d-8c94-c8381fec47ad", "comment": "Malware payload (CoinMiner)", "value": "a6cf2bb96f20979d0d35965551b13fde", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930802, "uuid": "fc455cf3-110f-40d0-9c2e-2bc6cddd0a2e", "comment": "Malware payload (CoinMiner)", "value": "dbb7ebb960dc0d5a480f97ddde3a227a2d83fcaca7d37ae672e6a0a6785631e9", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930802, "uuid": "b74dda18-82b8-4f99-b46e-db0ae42d7f73", "value": "T1E4753308476458F0F7A4E5888BCDACAE631AC95255F70F4ED4329CF35EC875336A2E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930802, "uuid": "27b00718-80ff-43ee-8db2-f41c26ea6f8b", "value": "24576:hzfEtBkjj8t0D/p5fAZ6LNnw3sXQyXQ9enZM/CTC2c/w9pwTRfkxZwFfV3h:hzKB8j8y/fvNn005geS/AX99SVkbwR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775930802, "uuid": "ff880b0b-d530-41dc-a9fd-5b6fe9ba453e", "value": 1560860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930802, "uuid": "c9f295ad-80aa-4e45-849d-5d4d18e210a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef1309ad-c1b8-11f0-85ba-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1775930804, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930804, "uuid": "30a46735-4da8-4d70-bd00-b5ad8d2934fe", "comment": "Malware payload (CoinMiner)", "value": "62802abcae18d915a106788308192def", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930804, "uuid": "72406a2c-7ddd-4d9f-83fd-f55284123055", "comment": "Malware payload (CoinMiner)", "value": "3625d068896953595e75df328676a08bc071977ac1ff95d44b745bbcb7018c6f", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930804, "uuid": "b4e41228-7e0c-47ef-aead-2b4c9874602d", "value": "T1E85533D67B8493DCC13CF099E908DC283CECA9248F776D04DE5148C63667BB58A58A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930804, "uuid": "ea7231ea-e6d2-4d53-b54e-a14dda5f5ac4", "value": "24576:yaOwVvvYm3CwpbTqfb2tEZYclsK21F9vJLESiWiV5:y3wDTqfespsBfxJM/z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775930804, "uuid": "589add02-32d4-4140-b5ed-d990456856b4", "value": 1299516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930804, "uuid": "ff7d30d0-8d05-45a6-889d-b44d417885c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33e4d0a4-35d1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775930806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930806, "uuid": "bb9e266a-9ca8-46b8-ae66-dd85b5245b8c", "comment": "Malware payload", "value": "d2bca72b56ee5a730e37dd037e7ca359", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-6074", "colour": "#B033E8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930806, "uuid": "19ba02ec-24f4-4d85-8742-8bb492a59798", "comment": "Malware payload", "value": "bc78b8628b1162d35f7dc3a784aba65d3dc6a054f83b4dc53e924f0cbeee913b", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-6074", "colour": "#B033E8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930806, "uuid": "1fefd520-bc6d-4bf9-b4a5-5c44ebb1ce2c", "value": "T199157C46F2F374FDC067C030879BDB626932F46551222E7B21C4DA352E96E601B2AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930806, "uuid": "bb1c6206-c0cf-471c-8f6a-de44cf783bc3", "value": "12288:N0cr5GKlXKgYwWz4h2roQaqZs2I+oRemy0IQ+EYDX5kSrBkrTUNN:N0cr5GoXKMWz4h2rNpZsqoEEYD11kr4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775930806, "uuid": "70d2f26d-3e0d-4599-9b7a-5e2d3632b7ec", "value": 934968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930806, "uuid": "9a134b14-e271-446a-af12-5538aef57611", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41d0d85c-35d1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1775930829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930829, "uuid": "1dd16fb2-eb64-4ff6-a399-fc0cc42d4394", "comment": "Malware payload (Kaiji)", "value": "81848644a2abe0f844960042c0fc6d80", "object_relation": "md5", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930829, "uuid": "c8eafa10-15d6-470b-b66b-1a30fb8ab43f", "comment": "Malware payload (Kaiji)", "value": "08eba95ef63148053a58881aae8bd736aefa25c7a9188489658f26933c71a236", "object_relation": "sha256", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930829, "uuid": "a5d30a5f-75cd-4a96-bb46-0442840097dc", "value": "T179B171CA0D47E4B292EA9E2662D451ABCC8461D3D9E51505F7CCBF230B78AA4F721E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930829, "uuid": "b2ff5a64-12f9-4fe0-b472-5fa11242e4d4", "value": "96:q2sQC73wC734/jtxIAEzgsC/ofpC73gTA0zC/Jtg5/JGq:W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775930829, "uuid": "7f69a6e0-a580-4fd8-a39c-8d16ddb8df94", "value": 5175, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930829, "uuid": "66e3efde-1c12-4515-8d36-80de37b97ff3", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff0364fd-c193-11f0-85ba-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1775930829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930829, "uuid": "b291ff80-6727-4013-b141-a814254399c2", "comment": "Malware payload (CoinMiner)", "value": "aaa5098c9caafccf15362b017825c64b", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930829, "uuid": "8cc58087-257d-4db5-9456-4091f1ed2c34", "comment": "Malware payload (CoinMiner)", "value": "59c29436755b0778e968d49feeae20ed65f5fa5e35f9f7965b8ed93420db91e5", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930829, "uuid": "4cb9fb40-3ea9-45d3-ae97-5be051e61b5a", "value": "T18B9533D309864BF0BFA2EF3451585D86EA60EE744B7CB2B8F3B0A27436436E5E1604", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930829, "uuid": "994602ed-54a3-4e1f-b01b-c7b1d8cc8e12", "value": "49152:EpCKabVQ+9qlNlpjN8H8JZGtucdfFY91ujYIQ+:fBqnN8H8HIazujYIQ+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775930829, "uuid": "1a6e20f9-377a-4aa4-8fb6-7905fd4bd3f4", "value": 1880264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930829, "uuid": "ca4c4c10-5f00-4e66-985b-2ebd3b4f1872", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c6d30ca-35d1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1775930954, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930954, "uuid": "7bbc5332-07b1-4cd3-ab1d-d57e62a0ef7d", "comment": "Malware payload (Kaiji)", "value": "a61970d0610f5e8eacbfe04c3b2c5968", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930954, "uuid": "77aaab20-ddb3-431c-b077-01af83faaf88", "comment": "Malware payload (Kaiji)", "value": "de68bd0d3752caf47af6abfaeb4a4621b8fd8f86302fccefa9d3762e7ca984cb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930954, "uuid": "04345cc0-5e9b-4f81-aa2b-db4f247f9639", "value": "T146A5F857B8918552C4E42637BCBE81C833635EB99B8663666D04FE3C3ABF2D90E353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930954, "uuid": "62f1c9e2-2c17-4b4e-93bc-4f4eb8c10a90", "value": "24576:J1rMILphWsdRm6vM7lUVJtq8wfe9OqbVgYQ3k48jtIMoG34hJnWVh1BPnjKqZdtX:JVfjm5Mo2T1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775930954, "uuid": "20e57621-73e7-4ad1-8786-d9f2353e5168", "value": 2097152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930954, "uuid": "1c9cffee-eb1a-4f76-ba1c-e10e99958528", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c894998-35d1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1775930954, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930954, "uuid": "b96da969-de37-4170-85f6-2b211c926ac3", "comment": "Malware payload (Kaiji)", "value": "c00e68b946e780f7a69884ec33bde982", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930954, "uuid": "b1ba90be-6db7-443d-a315-d39c77995ff4", "comment": "Malware payload (Kaiji)", "value": "d58fc53713b865e702d0f5cf91126282eb6ad5f9b3f57e5805f0f237e11e884b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930954, "uuid": "713fd0fb-9864-4c3a-89be-f563c5cd451a", "value": "T1D3B5F8117F49EE5FD69422354EA6C33833967C14C2A03133AB51F7292FBA2B88D5AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930954, "uuid": "831de32c-572e-428a-a45c-ddf57a04db67", "value": "12288:WY8Zinp3M6B0XBgI19CUdMp3LAQh1CHpAaxVX4ltPuMFLgbM8yn+kvgftZAMcq+:bm6WBkSXVX4lRuMFL4o+k4fcR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775930954, "uuid": "6759a240-bb80-4a9f-ad5a-f24a5895e2c7", "value": 2359296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930954, "uuid": "21e748e4-10d7-4c99-b841-189742857afb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c926853-35d1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1775930954, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930954, "uuid": "6de2ad28-ad91-47b0-aa2d-ae4e0f1020b7", "comment": "Malware payload (Kaiji)", "value": "b1a3e0881cc056e2b4bdbaaf6608e003", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930954, "uuid": "3727f13a-f6ea-441a-9bbf-85d729d91704", "comment": "Malware payload (Kaiji)", "value": "dd0193318124d2329bdc2f8f34cbd3d0181f52042a1033dde9cef7ba22cfcf6f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930954, "uuid": "d6939bce-97fe-417e-8530-c85c2bf737dc", "value": "T119955B85BC9DA912E9C97EB56F2502D07225FC4D9F81C7177A00BBAE6DF23588F213", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930954, "uuid": "556e47b1-203a-4fd4-9a42-457f265bdd17", "value": "24576:/wRmgu8dG9qDQtfTBmW0NREmCNPC498U4TprOEa6QWgrz1v:/euCG9qE5BSIAUrz1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775930954, "uuid": "ff9a73b3-98d1-41a7-8696-e2870c719244", "value": 2031616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930954, "uuid": "8d0b1065-c176-4065-a3c9-8bff8b3b865e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ca2fcd8-35d1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1775930954, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930954, "uuid": "7fea4862-cf19-4f0c-8020-13f906c975f0", "comment": "Malware payload (Kaiji)", "value": "c67ec08fc2cbc6ae09d047d7ba038816", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930954, "uuid": "b2cda205-f581-4a99-9e2c-9763854fa9db", "comment": "Malware payload (Kaiji)", "value": "b9746f0b66dfb150588536ce9807deb8fe51bce515c988fab399d536c8484e50", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930954, "uuid": "5a313115-1aea-4a9f-81cc-e1ce6f1aa31f", "value": "T142B53A137F28D70EC71521344DB2CB94676A6C8A07D6A517BB81F319B8B20AC4E6ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930954, "uuid": "eee587e5-4c50-4a50-8128-a766cd8ff93e", "value": "24576:cdz8hxtvZ8T0p+gpvRYvyVW1Z0WWJ/RVXbwqel9OFI+TcR:TFpW8gqelga+u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775930954, "uuid": "26b6f96a-d231-4cf8-bdd3-507fcbd964f8", "value": 2293760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930954, "uuid": "7e7a2471-2cd8-415a-a2d4-b6d1b7e37f3a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "904f8db6-35d1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1775930961, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930961, "uuid": "a141c543-a159-4927-a178-c904276395b6", "comment": "Malware payload (Kaiji)", "value": "b904cb4ce2aa080e68ae69f4b890bedd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930961, "uuid": "07628572-22ed-4394-b0f8-10a8f5be6b43", "comment": "Malware payload (Kaiji)", "value": "3a7c2408713b426dbe0b08e7cf51421666b18872d11de099a8f2434c5e257b2e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930961, "uuid": "cfc6e88f-5e55-4619-af37-5e2144296a2d", "value": "T14CA50857B8918542C4E42677ACBE81C833635EB99B8663266D04FE3C3EBF2D90E353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930961, "uuid": "def91e3d-454e-4125-829e-209b3c4e2e47", "value": "24576:JgCbFbDVZ7bVCj3ozPQPTUkrtQ05OYRWNOrdErF4ff1kRrhnyVhv8uofvsRWA1SH:VCWxuM2T1s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775930961, "uuid": "c82f1386-a563-469b-8179-8c5e3f72ed25", "value": 2097152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930961, "uuid": "9f7c2ac0-2b8d-44e1-bb7d-e776549f09e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93206fe0-35d1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1775930965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930965, "uuid": "3b4fa94a-6edf-4822-9f92-0f30731f9600", "comment": "Malware payload (Kaiji)", "value": "1bdf48addfdc484b06ce224565adc7ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930965, "uuid": "56232164-e421-4ab0-a50f-9ae004ab1fd1", "comment": "Malware payload (Kaiji)", "value": "ac5461d68abb723a2f5c8f5aca99c32e40d24a87fe788127800f734a4474d1f0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930965, "uuid": "66c0a58e-2ee9-433f-b59e-b92426f99248", "value": "T12AA50857B8918582C4E42677ACBE81C833635EB99B8653266D04FE3C3EBF2D90E353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930965, "uuid": "3c5abfc5-a035-43b9-af77-3b119c7ee603", "value": "24576:gNwGGRggwEGpD5IaZIJzIDgliOAMUh1Rskiq1zpQHCaRU7axVL0rKEk3dVh/cviW:VrcNoLf3z82T16", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775930965, "uuid": "4a2339be-9470-4d40-88b2-05a31d363f9f", "value": 2097152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930965, "uuid": "ed74ae19-f139-47d0-b906-b56dcec1a4a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "932df44c-35d1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1775930965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930965, "uuid": "96968b8a-1f0f-4e62-a721-681b896793aa", "comment": "Malware payload (Kaiji)", "value": "0df954759bd65fe0c260820c257a084c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930965, "uuid": "1d33178b-8569-47b5-8322-4cd5bbf06260", "comment": "Malware payload (Kaiji)", "value": "a2ce4bfd8411324b10576d228b04cb8036e61b998ae9162e6f81ab65cf7416bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930965, "uuid": "7221c691-cb85-4e22-ac66-8fae20704ca0", "value": "T166952847B89156A9C0AAE234CA664252B761BC991F3163D73F10B3F82F33BD45E393", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930965, "uuid": "9b629d82-f2bf-4c9d-82bc-0735c90e3b19", "value": "49152:XXPVKrbvGOQLeS7rb/TCvO90d7HjmAFd4A64nsfJrkaani38J4B+g2vUqHOErz1:tPXZz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775930965, "uuid": "ae9a05dd-059d-4248-b947-bdc8bcc16120", "value": 2011136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930965, "uuid": "7aaa8bb4-8bcb-4566-9a2b-2c53ebc9468a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "932f3c7b-35d1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1775930965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930965, "uuid": "67362e82-4f88-46a6-bfe9-0dbe9099f912", "comment": "Malware payload (Kaiji)", "value": "55de5fc1d8e1fedbdacfda1f3936e03a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930965, "uuid": "b247783a-0ecd-4305-9a3d-38d09386b2c1", "comment": "Malware payload (Kaiji)", "value": "d15452ea2f112c4a1d52a0459622483618598cd8796f9cab8f23554fd0f53285", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930965, "uuid": "55e363f0-254f-4175-9bd2-39aa9140eb67", "value": "T1CDB5F80ABDC16F7AD59C03354AEE165A23513E495B91072327A4F7B83A7733CAF1B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930965, "uuid": "1ea5d702-d7e1-44c7-b4f6-7456a7b68cd1", "value": "24576:mU9tyqIId8F9/dQbZ97G8J6C0OVXc8RuMFLGk+koAe0G4Zz1v:AqIIqrlQtz04uM9Gk+CeCZz1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775930965, "uuid": "b200fcca-0cde-4684-bcab-4e544fdebf6d", "value": 2359296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930965, "uuid": "9d38e379-cd4e-439f-8554-c862a73463ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "933719c8-35d1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1775930965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930965, "uuid": "618c9184-a83b-4c92-b7e2-c8568f2a8bb0", "comment": "Malware payload (Kaiji)", "value": "adabc3efdce4ff0451de47a82d297269", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930965, "uuid": "94322163-040a-4612-9bdf-3c954226bd13", "comment": "Malware payload (Kaiji)", "value": "47b6ecba4e77e4fce84fe768b11d8bde2936938c2ae07a35aa9aa8f7fe6fe192", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930965, "uuid": "210eb2c2-4eb0-40bf-8606-a219b8f07c19", "value": "T1D4951711F98B54F2E9071A3104AFA26F27319D054F34EBC7EA40BB6AFD776D209322", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930965, "uuid": "ec985b2d-aa92-4103-a19e-701cace2af62", "value": "24576:ae9ufJvk4gQjMNRfktnsIXvZFyD9i+MPCIxyuzNqssZXJjIbdYVVMtIwWz1v:WYMnwRO4ssPkd5Wz1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775930965, "uuid": "df2b2d5d-a5aa-43df-bff6-a49de1c11a36", "value": 1916928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930965, "uuid": "38e09c0c-e93b-4907-9782-3ff7b838e2bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96ed933f-35d1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1775930972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930972, "uuid": "1c6f5ee1-15fd-41d7-acc1-0b3616110248", "comment": "Malware payload (Kaiji)", "value": "c851f0819ad44f8243b41909386d0b15", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930972, "uuid": "def6bd3c-9215-498a-95cc-bbadff47b3b6", "comment": "Malware payload (Kaiji)", "value": "b194e7945dee7198eca61d7cd8308b1a3a66eb01e48f5221a8a713024dab06d5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930972, "uuid": "5e24bef7-607b-4834-8c0d-8690f50a846f", "value": "T133B5D615BCC42BEAC02C5F7898E6896623A45D044FF2573625A4FBE9B8762347F47C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930972, "uuid": "f9a56ea5-0995-4c74-b8d8-db2645967673", "value": "24576:kO+PuaNFZRml7/I1n0rOakVXFYd+lCQYWz1v:9eN0xd+lCWz1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775930972, "uuid": "0506d6b5-db77-41b3-aec0-0f57a3122dc0", "value": 2293760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930972, "uuid": "3e3b0f1d-9532-4ebe-996e-ae4e68766615", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04f2dce3-35d6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775932874, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775932874, "uuid": "18f1e00a-d851-4a6a-935b-1adca362fe1d", "comment": "Malware payload", "value": "07d13253b53e6b2f6d6a30808148bda0", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775932874, "uuid": "5cb46228-7955-4a2c-834e-6710d58d3901", "comment": "Malware payload", "value": "9395981b714f0f561d0163a1f8ab16c7be8ae70ee5356e49939d4843beb3f2d7", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775932874, "uuid": "e9e8db5d-e38c-4ff1-a8a3-68352dd99e06", "value": "T1ADF65C67B94F4976720084B0524FB414AB818AAB25341C65FBDDA37C3F15ABA60BF3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775932874, "uuid": "1ce285b6-9672-4a49-bb92-e2cbb5384a69", "value": "98304:LVKTmWTTWTsACPwaxuTcjcHCh5Nr0Trcp7cnuSwu5l4Ce7/ZTmIZv9lX9QZ:Qy4aIACPwaxu64u7QfS7cxTuXhZ9C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775932874, "uuid": "60e7f792-4ebb-4f99-bea8-2c8e054f4675", "value": 16353280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775932874, "uuid": "4ce31f25-5ff2-403a-ad7a-7ec63557fdbd", "value": "application/x-tar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b105cdf6-32ac-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775933069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775933069, "uuid": "a7dc7932-acde-432d-a3bb-d704a4f0f073", "comment": "Malware payload", "value": "db171399f30720426c517b75a3d360fc", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775933069, "uuid": "5026164d-6506-400f-a22f-9089fa2fd5fb", "comment": "Malware payload", "value": "8f2bfe0930e83fac5390c0423d979f5ddf50a09d9646524f57809e68b067219f", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775933069, "uuid": "767313b1-7247-43b8-b2fd-91ab2db92e77", "value": "T1A3B0922C9144994A4486885078924E4BA6AFE21944AC62840AB7806E62CE6EEE89B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775933069, "uuid": "95f89c9e-0c02-40bc-85a3-62dd3f41afe7", "value": "3:uEJIXqSXht19gBMSELG/AKGgKmHQXKAwDEIMA4lJMZRbv4o:9IXqSXhphGIdPmHQhXlJYT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775933069, "uuid": "dd0b10e7-a029-40f3-9774-ef284c713418", "value": 122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775933069, "uuid": "28edaef9-a088-4da1-91dd-13a3cb209f5d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "036e1e60-35e3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775938455, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775938455, "uuid": "fc3666d0-f5ee-4656-8bd9-e62430f5cdca", "comment": "Malware payload (Mirai)", "value": "5e3900e1601707b86345be19b2dcea22", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775938455, "uuid": "cb2bbc09-88cf-4512-844d-c32b68c81455", "comment": "Malware payload (Mirai)", "value": "42d28652dce45b687b7e508166414badd213191d16de11133f249c710697df86", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775938455, "uuid": "8576d558-682e-4164-b419-8db642cf6b65", "value": "T15D43021CA59E4EE8C4DD10BA1631AE06F0A1A7FD1D2F9D91D6CC332F6D88BC5F400A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775938455, "uuid": "eedb626d-1f42-4b6b-b942-8a0f0239c308", "value": "1536:3bn/D/l+CZYj+VOw+eFsssc3Uc2jQnCwlEsAnouy8q:TRBZYqWssJ/jQCwlIoutq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775938455, "uuid": "9dbc3559-fbc8-4095-a371-161aa1208832", "value": 57648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775938455, "uuid": "5ec34c2e-bb5b-4556-afb5-dbd6f4418c80", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775865849, "uuid": "f6b14d2f-3539-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://show1-data.exhib1torknot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775866268, "uuid": "f0938e14-353a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api2-knot.exhib1torknot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775866508, "uuid": "7f80915a-353b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-view.exhib1torknot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775866637, "uuid": "cc73cb9f-353b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.252.119.164:53450/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775866868, "uuid": "55e2aca2-353c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault4-file.exhib1torknot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775867060, "uuid": "c864203c-353c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.88:37256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775867232, "uuid": "2f4c83db-353d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-mark.exhib1torknot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775867528, "uuid": "df5932a2-353d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub6-secure.exhib1torknot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775867886, "uuid": "b4ce59e1-353e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://team1-work.consiliumundu-lat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775868130, "uuid": "4626664f-353f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api2-unit.consiliumundu-lat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775868548, "uuid": "3f4c69b4-3540-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-link.consiliumundu-lat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775868785, "uuid": "cc8251b3-3540-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7900572318/dh9skIh.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775868909, "uuid": "166f51d6-3541-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault4-root.consiliumundu-lat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775869149, "uuid": "a5b93a24-3541-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.102.27:43115/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775869216, "uuid": "cdbf4c81-3541-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-base.consiliumundu-lat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775869327, "uuid": "0fca4fe9-3542-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.184.170:52670/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775869509, "uuid": "7c4c3d14-3542-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-hub.consiliumundu-lat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775869875, "uuid": "563fe201-3543-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.236.65.51:60916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775869875, "uuid": "56558077-3543-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.67.33.209:43188/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775869932, "uuid": "7869b8e6-3543-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://test1-api.pestte1ex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775870046, "uuid": "bc7d309d-3543-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.125.212:42256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775870168, "uuid": "04d8a75e-3544-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node2-info.pestte1ex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775870528, "uuid": "dbda1d30-3544-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault3-io.pestte1ex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775870904, "uuid": "bbd1ea57-3545-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.102.27:43115/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775870954, "uuid": "d9b68619-3545-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4-relay.pestte1ex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775871308, "uuid": "acaeb3ad-3546-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub5-gate.pestte1ex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775871548, "uuid": "3bb395d8-3547-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://point6-svc.pestte1ex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775871553, "uuid": "3e80466e-3547-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.220.84:55633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775871727, "uuid": "a6560f43-3547-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.235.117:43628/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775871910, "uuid": "139629c3-3548-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://game1-log.creep-score.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775872272, "uuid": "eaef1d46-3548-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api2-score.creep-score.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775872326, "uuid": "0b90fdd5-3549-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.32.41.127:56362/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775872398, "uuid": "367fe6f6-3549-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.101:50653/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775872568, "uuid": "9bb7cf03-3549-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node3-play.creep-score.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775872869, "uuid": "4f0c2c25-354a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault4-data.creep-score.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775872998, "uuid": "9bb67f4c-354a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.220.84:55633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775873228, "uuid": "250ec988-354b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-match.creep-score.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775873526, "uuid": "d6a2fd60-354b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.254.188:33195/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775873586, "uuid": "fa9c3e01-354b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-hub.creep-score.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775873887, "uuid": "adc66af9-354c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clean1-api.don2tdouching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775873958, "uuid": "d835b0ee-354c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.130.116:40160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775874128, "uuid": "3d3db069-354d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.9.69.240:54022/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775874309, "uuid": "a97179e8-354d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node2-soft.don2tdouching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775874609, "uuid": "5c0af001-354e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault3-info.don2tdouching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775874910, "uuid": "0f4a8bca-354f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc4-relay.don2tdouching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775875269, "uuid": "e585774d-354f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub5-base.don2tdouching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775875327, "uuid": "08356052-3550-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.50.197:35044/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775875332, "uuid": "0b23f545-3550-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.194:49427/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775875627, "uuid": "bb00c1ca-3550-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.9.69.240:54022/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775875630, "uuid": "bcd2610d-3550-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-way.don2tdouching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775875639, "uuid": "c2412869-3550-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.130.116:40160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775875998, "uuid": "97e1f1b9-3551-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.69.113:54434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775876227, "uuid": "2099d0ca-3552-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.89.216:38241/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775876231, "uuid": "22bdee71-3552-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://help1-sync.quick-support-portal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775876469, "uuid": "b0d8fc6f-3552-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node2-desk.quick-support-portal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775876478, "uuid": "b63d7d45-3552-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.194:49427/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775876529, "uuid": "d4744e89-3552-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.165.118.34:37735/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775876543, "uuid": "dce288a8-3552-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.159.195:35403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775876720, "uuid": "46727d22-3553-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api3-auth.quick-support-portal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775876828, "uuid": "86aff983-3553-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.50.197:35044/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775877008, "uuid": "f22f548e-3553-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault4-file.quick-support-portal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775877427, "uuid": "ebfd65f0-3554-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-relay.quick-support-portal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775877728, "uuid": "9ef903ce-3555-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.137.90:58886/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775877730, "uuid": "a053c1e5-3555-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub6-main.quick-support-portal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775878027, "uuid": "51668fa1-3556-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.29.223.148:58205/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775878031, "uuid": "53bcad5c-3556-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.32.252:44183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775878093, "uuid": "788c5b22-3556-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://eco1-trace.green-energy-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775878277, "uuid": "e6548adf-3556-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.159.195:35403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775878327, "uuid": "0409d0a1-3557-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.89.216:38241/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775878509, "uuid": "71073208-3557-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node2-power.green-energy-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775878642, "uuid": "c03bff6c-3557-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.134.56.149:50142/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775878747, "uuid": "fe6ee8b9-3557-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api3-grid.green-energy-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775879109, "uuid": "d64d979f-3558-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault4-data.green-energy-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775879233, "uuid": "200e10bf-3559-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.249.185:58168/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775879414, "uuid": "8c29ee1e-3559-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-solar.green-energy-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775879538, "uuid": "d6414a5e-3559-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.249.185:58168/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775879540, "uuid": "d77366d9-3559-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.32.252:44183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775879721, "uuid": "430c1333-355a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.100.3:50977/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775879778, "uuid": "654146ab-355a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub6-relay.green-energy-flow.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775879827, "uuid": "828ed32b-355a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.29.31.215:40030/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775880139, "uuid": "3c1c26f2-355b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.129/bins/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775880329, "uuid": "ad95de88-355b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.249.155:49133/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775880372, "uuid": "c7048da0-355b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://home1-verify.smart-home-verify.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775880552, "uuid": "32496be7-355c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node2-check.smart-home-verify.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775880741, "uuid": "a34999dc-355c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.148.192.89:43983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775880792, "uuid": "c17dbb84-355c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api3-safe.smart-home-verify.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775881088, "uuid": "72008b06-355d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault4-info.smart-home-verify.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775881396, "uuid": "2949838c-355e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-relay.smart-home-verify.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775881527, "uuid": "7765f89d-355e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.139.167:36776/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775881752, "uuid": "fdb5d10a-355e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-way.smart-home-verify.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775881821, "uuid": "26f08cb6-355f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.249.155:49133/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775882116, "uuid": "d6e657d6-355f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shop1-data.local-market-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775882467, "uuid": "a813d64a-3560-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node2-list.local-market-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775882831, "uuid": "80d477e6-3561-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api3-trade.local-market-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775882958, "uuid": "ccb7f869-3561-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.139.167:36776/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775883134, "uuid": "35a04ba1-3562-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault4-root.local-market-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775883447, "uuid": "efc9f6d1-3562-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.106.68:45407/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775883493, "uuid": "0b44834b-3563-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-relay.local-market-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775883502, "uuid": "11125cfd-3563-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.48.189:51357/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775883682, "uuid": "7c596d1e-3563-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.176.198:38994/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775883790, "uuid": "bc736c6b-3563-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub6-gate.local-market-hub.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775884090, "uuid": "6f5db8ab-3564-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trip1-point.travel-point-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775884166, "uuid": "9c6f61b4-3564-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.172.83:48142/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775884395, "uuid": "25449ae4-3565-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.11.175.246:43403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775884450, "uuid": "4597a55f-3565-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node2-map.travel-point-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775884627, "uuid": "af930bab-3565-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.56.206:58800/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775884809, "uuid": "1be6ab31-3566-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api3-trace.travel-point-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775885174, "uuid": "f58a3be8-3566-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault4-sync.travel-point-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775885422, "uuid": "892aa575-3567-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.157.47.179:33973/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775885527, "uuid": "c7fe2ef4-3567-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-relay.travel-point-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775885826, "uuid": "79e19fa2-3568-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.128.202:42634/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775885829, "uuid": "7b9bd229-3568-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.191:58368/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775885833, "uuid": "7e2ea38e-3568-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-way.travel-point-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775885951, "uuid": "c45f00b1-3568-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.172.83:48142/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775886127, "uuid": "2d51c67d-3569-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.29.31.215:40030/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775886127, "uuid": "2d556aba-3569-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://job1-sync.office-task-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775886127, "uuid": "2d9f953e-3569-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.209.112:44937/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775886491, "uuid": "06581a09-356a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node2-task.office-task-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775886787, "uuid": "b6d8c72f-356a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api3-work.office-task-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887091, "uuid": "6c3c46f9-356b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.39.52:57431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887158, "uuid": "93e7bd31-356b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.90.35:35122/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887215, "uuid": "b5d90763-356b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault4-file.office-task-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887328, "uuid": "f978b518-356b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.123.247:37347/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887510, "uuid": "65fd7388-356c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-relay.office-task-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887627, "uuid": "ab4ac08d-356c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.209.112:44937/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "d6a07715-356c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.105/arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "d6a67ff3-356c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.105/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "d6ac0fef-356c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.105/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "d6b01591-356c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.105/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887699, "uuid": "d6b016a4-356c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.105/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887700, "uuid": "d6b6c2dd-356c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.105/arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887700, "uuid": "d6b74909-356c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.105/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887700, "uuid": "d6b758ba-356c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.105/arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887700, "uuid": "d6b7aeb0-356c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.105/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887700, "uuid": "d6b88500-356c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.105/arc", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887700, "uuid": "d6c0868d-356c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.105/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775887810, "uuid": "18d5d7a0-356d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub6-gate.office-task-sync.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775888056, "uuid": "ab39fb27-356d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.153.5:33447/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775888528, "uuid": "c4513e4a-356e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.29.5:35364/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775888531, "uuid": "c683b0cc-356e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node2-area.urban-growth-data.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775888892, "uuid": "9d6cf444-356f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api3-chart.urban-growth-data.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775888957, "uuid": "c463f820-356f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.129/bins/pmips", "Tag": [ { "name": "85-11-167-129", "colour": "#5535c8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775888958, "uuid": "c4e8dd9b-356f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.129/bins/pppc", "Tag": [ { "name": "85-11-167-129", "colour": "#5535c8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775889128, "uuid": "29ec39f9-3570-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.178.12:35167/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775889187, "uuid": "4d223e42-3570-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.129/bins/run.sh", "Tag": [ { "name": "85-11-167-129", "colour": "#5535c8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775889188, "uuid": "4dce2513-3570-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault4-sync.urban-growth-data.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775889188, "uuid": "4dea03cc-3570-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.129/run.sh", "Tag": [ { "name": "85-11-167-129", "colour": "#5535c8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775889427, "uuid": "dc9a9bda-3570-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.123.247:37347/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775889432, "uuid": "df461280-3570-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.202.178.70:53373/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775889854, "uuid": "daad2bae-3571-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-main.urban-growth-data.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775889863, "uuid": "e047ec93-3571-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.1:49127/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775889983, "uuid": "2788fd7e-3572-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.150.184:43309/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775890214, "uuid": "b1443a12-3572-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://test1-api.global-health-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775890469, "uuid": "4998b014-3573-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.184.191:39115/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775890512, "uuid": "630d71af-3573-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node2-info.global-health-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775890760, "uuid": "f720c81d-3573-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.224.148:44666/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775890929, "uuid": "5b60dd2d-3574-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api3-audit.global-health-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891186, "uuid": "f502b3c5-3574-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.1:49127/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891228, "uuid": "0dbf79b0-3575-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault4-safe.global-health-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891288, "uuid": "31741ec3-3575-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.52.82/htgghrehtherthreth/1234.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891417, "uuid": "7e6f16b9-3575-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yl9vr1j.oss-ap-southeast-1.aliyuncs.com/LetsPR03.5.1.zip", "Tag": [ { "name": "agent", "colour": "#cb166c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891439, "uuid": "8bdbda53-3575-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dows.1v5s.com/zh/letsvpn-latestX64.zip", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891440, "uuid": "8c1b8525-3575-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yangyangoss8.oss-cn-hongkong.aliyuncs.com/Letslat2.5.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891453, "uuid": "943e1b5f-3575-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://caifulai.oss-accelerate.aliyuncs.com/leuxtrogxre_x64.zip", "Tag": [ { "name": "MalGeneric", "colour": "#31c2be", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891482, "uuid": "a5507da6-3575-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kkk-214125124.s3.ap-southeast-1.amazonaws.com/Lets-VPN5.0.zip", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891604, "uuid": "ee23c088-3575-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-relay.global-health-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891724, "uuid": "3570229e-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.105/mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891724, "uuid": "3571bfd0-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.105/sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891736, "uuid": "3c942cfe-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/atomic/main.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891736, "uuid": "3cab7e44-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/atomic/main.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891736, "uuid": "3cc84a34-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/atomic/main.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891736, "uuid": "3cdc5ccb-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/atomic/main.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891737, "uuid": "3cf33718-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/atomic/main.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891737, "uuid": "3d0ef67d-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/atomic/main.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891737, "uuid": "3d230adb-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/atomic/main.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891737, "uuid": "3d394195-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/atomic/main.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891737, "uuid": "3d505580-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/atomic/main.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891737, "uuid": "3d689cc8-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/atomic/main.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891737, "uuid": "3d7ce1e3-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/atomic/main.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891738, "uuid": "3db659fc-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/atomic/main.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891738, "uuid": "3dce9842-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/atomic/main.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891738, "uuid": "3de3f20b-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/atomic/main.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891738, "uuid": "3e00fc99-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/atomic/main.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891841, "uuid": "7b570f60-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.150.184:43309/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891961, "uuid": "c2b14c07-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub6-gate.global-health-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775891961, "uuid": "c2ba625e-3576-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.184.191:39115/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775892255, "uuid": "7220db82-3577-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://web1-media.prime-media-gate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775892487, "uuid": "fc415f89-3577-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.99.75.86/Kharon_https_443.x64.svc.exe", "Tag": [ { "name": "139-99-75-86", "colour": "#fbcde3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775892487, "uuid": "fc4d9616-3577-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.99.75.86/Kharon_https_443.x64.exe", "Tag": [ { "name": "139-99-75-86", "colour": "#fbcde3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775892487, "uuid": "fc7079e7-3577-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.99.75.86/Kharon_https_443.x64.dll", "Tag": [ { "name": "139-99-75-86", "colour": "#fbcde3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775892548, "uuid": "20c7138a-3578-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node2-sync.prime-media-gate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775892681, "uuid": "70313fee-3578-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.213.203:33749/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775892914, "uuid": "facd9c88-3578-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api3-gate.prime-media-gate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775893213, "uuid": "ad3e01b8-3579-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault4-file.prime-media-gate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775893570, "uuid": "81ec851f-357a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-relay.prime-media-gate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775893872, "uuid": "35fe3f70-357b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub6-main.prime-media-gate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775894062, "uuid": "a700c6c2-357b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.40.73:38263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775894172, "uuid": "e8d8ae3c-357b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.213.203:33749/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775894295, "uuid": "32288b58-357c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://plan1-data.solid-build-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775894653, "uuid": "075c54f4-357d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node2-draw.solid-build-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775895130, "uuid": "237afda0-357e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api3-arch.solid-build-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775895370, "uuid": "b29a8747-357e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault4-root.solid-build-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775895496, "uuid": "fdc0ed15-357e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.179.97:11581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775895613, "uuid": "43c953ce-357f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5-relay.solid-build-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775895915, "uuid": "f7a2904d-357f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate6-way.solid-build-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896039, "uuid": "41467596-3580-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.9:53520/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896042, "uuid": "431a2656-3580-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.113.206.200:58442/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896328, "uuid": "edcc5fb4-3580-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.118.220:54296/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896389, "uuid": "11e32415-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.49.217.42/lk/mhIOdh1.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896455, "uuid": "39302dd3-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896455, "uuid": "3930f663-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896455, "uuid": "3930f7ae-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896455, "uuid": "3930f8b7-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896455, "uuid": "393137c5-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896455, "uuid": "393137c8-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/dss", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896455, "uuid": "39366a88-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/arm61", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896455, "uuid": "393711e7-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896455, "uuid": "394890b1-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896517, "uuid": "5e63ddda-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/co", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896517, "uuid": "5e69edda-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "8456fa3f-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.182/iran.i486", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "8457ff24-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.182/iran.aarch64", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "84580bcc-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.182/iran.powerpc", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "845dbde3-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.182/iran.m68k", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "846039d5-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.182/iran.x86_64", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "846426ad-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.182/iran.armv5l", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "8465d281-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.182/iran.armv6l", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "8465e936-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.182/iran.mipsel", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "84679821-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.182/iran.armv4l", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "846d97f5-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.182/cat.sh", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "84726be0-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.182/iran.mipsrouter", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "84749b09-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.182/iran.mips", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896581, "uuid": "848dc250-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.182/iran.sh4", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896635, "uuid": "a4e982e8-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.182/iran.sparc", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896636, "uuid": "a500b026-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.182/iran.armv7l", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896636, "uuid": "a505243d-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.11.167.182/iran.arc", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896758, "uuid": "ee44e256-3581-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/sex.sh", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775896820, "uuid": "12f7ee6a-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.156.87.140/dc", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897108, "uuid": "bedfaa9c-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://outel.linchens.com/dss", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897108, "uuid": "bedfbb09-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://linchens.com/dc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897117, "uuid": "c3b18c53-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://linchens.com/m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897120, "uuid": "c5fcd7bd-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://linchens.com/x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897120, "uuid": "c6034e52-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://linchens.com/i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897123, "uuid": "c7495f4c-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://linchens.com/arm61", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897123, "uuid": "c7779798-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://outel.linchens.com/x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897123, "uuid": "c78d9633-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://outel.linchens.com/dc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897123, "uuid": "c78dbc20-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://outel.linchens.com/586", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897123, "uuid": "c7a8ba24-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://linchens.com/sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897124, "uuid": "c848f2ec-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://outel.linchens.com/co", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897124, "uuid": "c865e1dc-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://linchens.com/586", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897125, "uuid": "c877f930-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://linchens.com/mipsel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897125, "uuid": "c877fe7c-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://linchens.com/ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897125, "uuid": "c89d3f74-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://outel.linchens.com/m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897125, "uuid": "c8a22d91-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://linchens.com/dss", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897125, "uuid": "c8a819bf-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://outel.linchens.com/sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897125, "uuid": "c8a81bb4-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://outel.linchens.com/ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897125, "uuid": "c8ae13ca-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://linchens.com/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897125, "uuid": "c8b7ed97-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://outel.linchens.com/arm61", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897125, "uuid": "c8b7fa24-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://linchens.com/co", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897125, "uuid": "c8bfe794-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://outel.linchens.com/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775897128, "uuid": "ca8d688f-3582-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://outel.linchens.com/i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775898010, "uuid": "d817700f-3584-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.224.148:44666/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775898020, "uuid": "de33dc53-3584-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://outel.linchens.com/mipsel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775898020, "uuid": "de46c869-3584-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://outel.linchens.com/sex.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "outel-linchens-com", "colour": "#896b17", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775898022, "uuid": "df58c9cc-3584-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://linchens.com/sex.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "linchens-com", "colour": "#452f21", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775898075, "uuid": "ff39b6ee-3584-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.202.29:60383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775898133, "uuid": "216bb16e-3585-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.6.80:50950/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775898619, "uuid": "435dc1f2-3586-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.130.214.71:1212/cat.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775898619, "uuid": "4383256b-3586-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.6.161:59854/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775898726, "uuid": "8304e763-3586-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.82/sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775898913, "uuid": "f25323f2-3586-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate7.solid-build-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775899085, "uuid": "59165bdf-3587-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8788678720/nqGWEq6.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775899334, "uuid": "ed23299e-3587-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.132.194:34847/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775899334, "uuid": "ed3246e1-3587-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://active.solid-build-trace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775899458, "uuid": "37888ffc-3588-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.202.29:60383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775899626, "uuid": "9b9edb8b-3588-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.105.79:52869/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775899689, "uuid": "c1261619-3588-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.6.80:50950/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775899755, "uuid": "e8507940-3588-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://file.prime-media-gate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775899759, "uuid": "eae5e7bc-3588-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.254.188:33195/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775899928, "uuid": "4f8cdbf8-3589-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.29.145:49989/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775899933, "uuid": "52b04846-3589-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.78.90:57451/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900001, "uuid": "7ab045e9-3589-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.7.235.144:42783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900230, "uuid": "03a3c072-358a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api.global-health-check.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900237, "uuid": "079c26dc-358a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.249.199.4:37553/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900355, "uuid": "4dfd2616-358a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.69.249:57171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900356, "uuid": "4e8d988e-358a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.7.235.144:42783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900780, "uuid": "4b1ad9a1-358b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.130/static/ciubuc_spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900781, "uuid": "4c023e3c-358b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.130/static/ciubuc_aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900781, "uuid": "4c0248bb-358b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.130/static/ciubuc_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900781, "uuid": "4c05905d-358b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.130/static/ciubuc_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900781, "uuid": "4c059d49-358b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.130/static/ciubuc_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900781, "uuid": "4c0768bd-358b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.130/static/ciubuc_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900781, "uuid": "4c0d988d-358b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.130/static/ciubuc_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900781, "uuid": "4c0db569-358b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.130/static/ciubuc_mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900781, "uuid": "4c11a0ea-358b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.130/static/ciubuc_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900782, "uuid": "4c379405-358b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.130/static/ciubuc_i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900782, "uuid": "4c3808ea-358b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.130/static/ciubuc_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900829, "uuid": "6867fd1a-358b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.130/static/ciubuc_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900829, "uuid": "687d0c15-358b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://relay.urban-growth-data.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900829, "uuid": "689144e4-358b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.130/static/ciubuc_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900829, "uuid": "68939f77-358b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.130/static/ciubuc_i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900842, "uuid": "7001c45a-358b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.130/static/ciubuc_i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775900894, "uuid": "8f7d71a4-358b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://43.228.157.130/static/ciubuc_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775901016, "uuid": "d7e38700-358b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svc5y.prime-media-gate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775901188, "uuid": "3e8bf6d0-358c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.112.142:42291/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775901307, "uuid": "8523f69b-358c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/6723359323/b3OTisk.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775901371, "uuid": "ab9aa7dc-358c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://agentsca.particu1silomer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775901511, "uuid": "fec64879-358c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.207.22:36146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775901728, "uuid": "803e1f4e-358d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.29.145:49989/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775901729, "uuid": "80c5cd28-358d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.122.47:60453/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775901802, "uuid": "acaa596c-358d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.234.72:40757/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775901967, "uuid": "0ea92c63-358e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://processthor.particu1silomer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775901982, "uuid": "18073100-358e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.69.249:57171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902028, "uuid": "33412bd7-358e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://223.151.75.81:34182/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902032, "uuid": "3551027c-358e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.40.65:49846/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902216, "uuid": "a347dcae-358e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://f3rn-dock.particu1silomer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902569, "uuid": "75a822aa-358f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c34pp.particu1silomer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902583, "uuid": "7e39410b-358f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.59.118.193:45863/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902649, "uuid": "a50003bf-358f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.64/splm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902649, "uuid": "a59216ec-358f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.64/splarm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902650, "uuid": "a5ab62dd-358f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.64/splmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902650, "uuid": "a5b557e8-358f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.64/f", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902704, "uuid": "c6598a60-358f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.64/splarm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902705, "uuid": "c66ece67-358f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.64/splppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902705, "uuid": "c67e4c81-358f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.64/splspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902705, "uuid": "c6902ffd-358f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.64/splmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902705, "uuid": "c6aad59c-358f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.64/splarm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902705, "uuid": "c6c78a79-358f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.64/splx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902705, "uuid": "c6e318e1-358f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.64/splarm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902705, "uuid": "c6f79717-358f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://141.98.10.64/splsh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902749, "uuid": "e0e5de1a-358f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://124.198.131.52/bin/support.client.exe", "Tag": [ { "name": "124-198-131-52", "colour": "#b8d329", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902749, "uuid": "e0f78a41-358f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.198.131.149/bin/support.client.exe", "Tag": [ { "name": "124-198-131-149", "colour": "#3c3a3a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775902810, "uuid": "0529862e-3590-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tawg.particu1silomer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775903175, "uuid": "de9f5b74-3590-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rive-wag.particu1silomer.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775903177, "uuid": "e00e0fdb-3590-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.207.22:36146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775903229, "uuid": "ff119eb2-3590-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.208.242.90:34479/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775903366, "uuid": "50825b9f-3591-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.221.224.109:60594/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775903366, "uuid": "50a8b9dd-3591-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.156.139.209:50260/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775903483, "uuid": "963a24d9-3591-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.234.72:40757/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775903533, "uuid": "b43ea3a3-3591-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fjor-dis.accentol-federat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775903732, "uuid": "2b0464f6-3592-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.113.129.64:48059/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775903827, "uuid": "63859df6-3592-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.40.65:49846/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775903953, "uuid": "aed3dbb8-3592-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://51tcb.accentol-federat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775904130, "uuid": "181bb0c1-3593-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.213.163.167:45405/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775904247, "uuid": "5dc52836-3593-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.47/bin/support.client.exe", "Tag": [ { "name": "192-159-99-47", "colour": "#950ff7", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775904313, "uuid": "8543ae9c-3593-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lqwstnf.accentol-federat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775904686, "uuid": "632acf93-3594-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.221.224.109:60594/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775904728, "uuid": "7c9c1597-3594-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tokencouri.accentol-federat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775904923, "uuid": "f0ac17c8-3594-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.156.139.209:50260/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775905098, "uuid": "590d3dbe-3595-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://epgl608r.accentol-federat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775905335, "uuid": "e62aabb6-3595-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.245.101.40:36806/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775905447, "uuid": "293cc2d0-3596-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-5hip.accentol-federat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775905525, "uuid": "573afb31-3596-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.185.92:37402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775905627, "uuid": "9454ea96-3596-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.24.29:36056/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775905630, "uuid": "9614018e-3596-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.213.163.167:45405/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775905706, "uuid": "c38821d2-3596-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.24.202:59456/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775905876, "uuid": "28cd922b-3597-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wb9g.halturitmel7ed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775906061, "uuid": "974038b6-3597-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.84.176:39460/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775906288, "uuid": "1e0da6a6-3598-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://reportmeadow.halturitmel7ed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775906653, "uuid": "f8298c0a-3598-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fjordvine.halturitmel7ed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775906662, "uuid": "fd5ecbe5-3598-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.185.92:37402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775906724, "uuid": "220ff085-3599-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.84.176:39460/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775907008, "uuid": "cba0c842-3599-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.230.148.181:40958/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775907132, "uuid": "1567d1f7-359a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geyseropen.halturitmel7ed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775907203, "uuid": "3f754b3e-359a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.158.40.164:34707/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775907312, "uuid": "8065873f-359a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.245.101.40:36806/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775907374, "uuid": "a5895032-359a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.109.218.22:54244/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775907498, "uuid": "efa0c3ed-359a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vvorke-core.halturitmel7ed.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775907617, "uuid": "36aeb03b-359b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdr35.identify-celebrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775907860, "uuid": "c763edb8-359b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.252.196:36319/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775907968, "uuid": "07a5875b-359c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qbknlas.identify-celebrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775908116, "uuid": "5fd354ca-359c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.251.51.169:36593/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775908272, "uuid": "bcc1331d-359c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://npcmrc.identify-celebrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775908336, "uuid": "e33aba4c-359c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.24.202:59456/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775908516, "uuid": "4e4ec849-359d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.94.0:50894/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775908628, "uuid": "913070be-359d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://narr-que.identify-celebrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775908818, "uuid": "0295e2d4-359e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.233.43:36502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775908992, "uuid": "6a0be255-359e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://03wc5c.identify-celebrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775909292, "uuid": "1cf8074f-359f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://d3ns-sheet.identify-celebrate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775909527, "uuid": "a9205e7d-359f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.91.58.255:39381/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775909709, "uuid": "159a9ba2-35a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bwglxvk.di5honorman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775909839, "uuid": "62bee672-35a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.158.40.164:34707/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910017, "uuid": "ccac9501-35a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.88:58751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910190, "uuid": "34607d36-35a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.251.51.169:36593/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910247, "uuid": "55c7e7ef-35a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.58.56.51/putty.exe", "Tag": [ { "name": "2-58-56-51", "colour": "#c38cf7", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910250, "uuid": "57d0c8af-35a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arklith4os.di5honorman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910433, "uuid": "c4edeff7-35a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://crateeast.di5honorman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910549, "uuid": "0a10d558-35a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/yl27ps.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910551, "uuid": "0aff4ab7-35a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/bl1e67obm3", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910551, "uuid": "0b00cfa3-35a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/eo7un5no4d", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910551, "uuid": "0b06caad-35a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/u7455i1vg3", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910551, "uuid": "0b06d6ae-35a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/9sf2t3505q", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910551, "uuid": "0b0a05eb-35a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/jc4z4ut4mb", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910551, "uuid": "0b818627-35a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.27.80:58830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910562, "uuid": "118fcb57-35a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/tztuz83uk4", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910562, "uuid": "11909604-35a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/k5gx9u07gi", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910562, "uuid": "119b8de2-35a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/3ln3lues0p", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910562, "uuid": "11ed7cc8-35a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.233.43:36502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910566, "uuid": "141a2090-35a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/i4z51e1kds", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910618, "uuid": "33552696-35a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/psbcrnbaqk", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910726, "uuid": "73b9821c-35a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.91.58.255:39381/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910791, "uuid": "9a670e27-35a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bundleser.di5honorman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910967, "uuid": "03256d82-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://192.159.99.119/bin/support.client.exe", "Tag": [ { "name": "192-159-99-119", "colour": "#9760f3", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775910967, "uuid": "0366d4da-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://193.26.115.225/bin/support.client.exe", "Tag": [ { "name": "193-26-115-225", "colour": "#bb8d90", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911027, "uuid": "26d29991-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.110:56283/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911027, "uuid": "271ab5c2-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.26.192.153/bin/support.client.exe", "Tag": [ { "name": "194-26-192-153", "colour": "#32b59b", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911030, "uuid": "288a03fe-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.94.0:50894/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911035, "uuid": "2bda5c58-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.201.196:54293/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911099, "uuid": "51fb0caa-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://169.40.135.126/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911099, "uuid": "52027fa1-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://169.40.135.126/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911099, "uuid": "5206c471-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://169.40.135.126/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911099, "uuid": "5206c908-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://169.40.135.126/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911099, "uuid": "520f30da-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://169.40.135.126/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911147, "uuid": "6e5016f8-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://169.40.135.126/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911147, "uuid": "6e593305-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://169.40.135.126/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911151, "uuid": "70c0a5a1-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vvi1d-line.di5honorman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911213, "uuid": "95a286a1-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://169.40.135.126/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911213, "uuid": "95a95cfe-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://169.40.135.126/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911266, "uuid": "b597d192-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.141.215.100/bin/support.client.exe", "Tag": [ { "name": "45-141-215-100", "colour": "#4e1926", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911267, "uuid": "b5cfca4a-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.138.16.142/bin/support.client.exe", "Tag": [ { "name": "45-138-16-142", "colour": "#e71b27", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911267, "uuid": "b5de1393-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.83.28.4/bin/support.client.exe", "Tag": [ { "name": "45-83-28-4", "colour": "#fb304f", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911272, "uuid": "b8bf7fda-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://169.40.135.126/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911272, "uuid": "b8c2483e-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://169.40.135.126/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911387, "uuid": "fda39dd1-35a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.31.215/bin/support.client.exe", "Tag": [ { "name": "45-83-31-215", "colour": "#4682b5", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911398, "uuid": "041ba62b-35a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.135.93:46730/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911398, "uuid": "04440904-35a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.98.137:59676/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911445, "uuid": "204a9032-35a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.88.186.47/bin/support.client.exe", "Tag": [ { "name": "45-88-186-47", "colour": "#e0b195", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911448, "uuid": "21e57ccd-35a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://0blj.di5honorman.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911566, "uuid": "68076b4b-35a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://45.94.31.102/bin/support.client.exe", "Tag": [ { "name": "45-94-31-102", "colour": "#b1fce4", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911567, "uuid": "68924df7-35a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.88.186.229/bin/support.client.exe", "Tag": [ { "name": "45-88-186-229", "colour": "#b541da", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911639, "uuid": "93cb0828-35a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.88:58751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911816, "uuid": "fd52e6ce-35a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.78.90:57451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911818, "uuid": "fe2cdd12-35a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fixthicket.awry-pause.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911928, "uuid": "3fd97be9-35a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.157.162.220:37027/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775911930, "uuid": "41186928-35a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.19.217.24:51089/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775912170, "uuid": "d02c31e7-35a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://majofres.awry-pause.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775912234, "uuid": "f65c306b-35a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.253.228:48676/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775912302, "uuid": "1ec18b85-35a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.27.80:58830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775912414, "uuid": "61f41aff-35a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.201.196:54293/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775912415, "uuid": "61fdba92-35a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qyfx7uy.awry-pause.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775912769, "uuid": "3532944e-35a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://harvestfern.awry-pause.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775912827, "uuid": "5817bb7d-35a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.110:56283/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775912839, "uuid": "5f314c65-35a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.98.137:59676/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775913125, "uuid": "0951ba92-35a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/1401316133/VSEFVUG.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775913127, "uuid": "0ad23abd-35a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ntcecfct.awry-pause.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775913255, "uuid": "571be00a-35a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.135.93:46730/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775913486, "uuid": "e0e1d7d6-35a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.205:57231/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775913491, "uuid": "e3ea12d2-35a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tri-mesha.awry-pause.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775913727, "uuid": "7074625e-35a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.37.194:59242/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775913728, "uuid": "70d625be-35a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.19.217.24:51089/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775913792, "uuid": "97544753-35a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sub-5ecure.cerbe7usout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775913861, "uuid": "c007b166-35a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.84.218:54139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775913922, "uuid": "e45bb3a5-35a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.99.61.213:56167/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775913982, "uuid": "084922e3-35aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.211.79.169:35501/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775914040, "uuid": "2b06fd2a-35aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.106.18.251:4563/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775914152, "uuid": "6de40c0c-35aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nornexix2.cerbe7usout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775914156, "uuid": "701ec275-35aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.143.150:59490/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775914449, "uuid": "1eb85042-35ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://asse9-point.cerbe7usout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775914688, "uuid": "ad36771c-35ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.99.98:39853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775914819, "uuid": "fafeb043-35ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://30qmgzf.cerbe7usout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775914993, "uuid": "6306bc11-35ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.87.158:59658/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775915359, "uuid": "3d53fc0a-35ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.99.61.213:56167/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775915411, "uuid": "5bf73551-35ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vvest0-path.cerbe7usout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775915422, "uuid": "62682416-35ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.84.218:54139/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775915592, "uuid": "c7c34baf-35ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ctlxx5r.cerbe7usout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775915826, "uuid": "5351b185-35ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.37.194:59242/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775915897, "uuid": "7dbf4252-35ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gatewaybalance.inven-tornon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775915898, "uuid": "7e685888-35ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.37.0.5:39727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775915900, "uuid": "7fcd3f6f-35ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.225.242:41730/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916018, "uuid": "c5f5d0ea-35ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.247.18:49926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916130, "uuid": "085509f3-35af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ciphersha.inven-tornon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916316, "uuid": "772cc999-35af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916316, "uuid": "772e4aee-35af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916316, "uuid": "773cf0a3-35af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916316, "uuid": "773d9f7f-35af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916316, "uuid": "77986cbf-35af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916318, "uuid": "78bdaca3-35af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.87.158:59658/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916319, "uuid": "79173b8d-35af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.56.229.232/bot_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916319, "uuid": "79447670-35af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.150.26/a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916320, "uuid": "798ce5a9-35af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.66.228.93/linux_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916380, "uuid": "9dc19cda-35af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.172/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916490, "uuid": "df48d90b-35af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://linric.inven-tornon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916611, "uuid": "278282ce-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.112/start.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916612, "uuid": "280489db-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.157.206/z", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916612, "uuid": "280ddf82-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.157.206/downloads/bash", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ladvix", "colour": "#c4644d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916617, "uuid": "2b1df2df-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.98.67/cat.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916621, "uuid": "2d176e03-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.172.154.218/.kok/temp.tar", "Tag": [ { "name": "tar", "colour": "#fb5a2e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916731, "uuid": "6eb0497c-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.112/cloud/redis-machined", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916733, "uuid": "6ffc5787-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.112/cloud/redis-scoutd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916733, "uuid": "70069240-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.112/cloud/redis-scand", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916733, "uuid": "700effeb-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.112/cloud/redis-conteinerd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916733, "uuid": "700f69ec-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.112/cloud/redis-conteinerd-shim", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916733, "uuid": "70112ad7-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.112/cloud/redis-initd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916733, "uuid": "70159ad0-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.112/cloud/redis-proxyd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916733, "uuid": "7016795e-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.112/cloud/redis-buildxd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916733, "uuid": "7019de5e-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.112/cloud/redis-credentiald", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916733, "uuid": "701c6b3d-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.112/cloud/redis-daemon", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916733, "uuid": "70288e13-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.112/cloud/redis-composd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916737, "uuid": "7258da60-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.112/cloud/redis-sbomd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916792, "uuid": "935834f5-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://convoynoble.inven-tornon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916793, "uuid": "93b5a730-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.112/cloud/redis-runcd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916793, "uuid": "93c2b0b3-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.112/cloud/redis-swarmd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916793, "uuid": "93cba3f2-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.225.170:47550/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775916931, "uuid": "e5c41283-35b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.25.132.77:54382/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775917152, "uuid": "69e8d87c-35b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-th1cket.inven-tornon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775917219, "uuid": "91c1caa3-35b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.93.181:34596/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775917338, "uuid": "d860f5dd-35b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.86.234.170:52086/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775917409, "uuid": "033447c2-35b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.86.5:47357/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775917450, "uuid": "1b742d8e-35b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://2hvdt1.inven-tornon.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775917453, "uuid": "1d1f269e-35b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.37.0.5:39727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775917577, "uuid": "670743b5-35b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.247.18:49926/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775917577, "uuid": "6720ad0c-35b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.225.242:41730/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775917577, "uuid": "6730d5fc-35b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.225.170:47550/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775917871, "uuid": "1683d539-35b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://1una-glow.nab2lamstibles.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775918119, "uuid": "aa59958c-35b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.23.37:60333/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775918168, "uuid": "c7932c50-35b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://p1xel7-cast.nab2lamstibles.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775918225, "uuid": "e96ff5f0-35b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://setupproducts.com/download/explorer.bat", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775918228, "uuid": "eb43576c-35b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://setupproducts.com/download/woofer.rar", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775918287, "uuid": "0e8889d7-35b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://furystaff.tech/download/net_launcher.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775918470, "uuid": "7b6120f6-35b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://banne-plate.nab2lamstibles.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775918471, "uuid": "7c34d3ca-35b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.49.65:54893/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775918887, "uuid": "740bd235-35b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lexckh.nab2lamstibles.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775918890, "uuid": "7585ae15-35b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.93.181:34596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775919139, "uuid": "09d21516-35b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.86.234.170:52086/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775919191, "uuid": "2932427b-35b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sapcave.nab2lamstibles.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775919549, "uuid": "fe969d29-35b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fs1zh.nab2lamstibles.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775919732, "uuid": "6bbdb4b3-35b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.65.11:41095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775919799, "uuid": "93c2c908-35b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.177.27:38986/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775919850, "uuid": "b1fb5e13-35b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fexbfw.histo-ricthe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775919920, "uuid": "dbd4e844-35b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.23.37:60333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775920449, "uuid": "16d2e8d5-35b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dyn-markal.histo-ricthe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775920628, "uuid": "81c03925-35b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://q16zhmu.histo-ricthe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775920637, "uuid": "86f6f896-35b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.228.87:54553/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775920927, "uuid": "34163ecc-35ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.98.41:34483/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775920933, "uuid": "377cc941-35ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qu4rry0-track.histo-ricthe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775921053, "uuid": "7eb4684a-35ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.29.5:35364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775921114, "uuid": "a306d15c-35ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.177.27:38986/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775921168, "uuid": "c353f276-35ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mskho2rr.histo-ricthe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775921227, "uuid": "e6e7d2f6-35ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.103.178:46035/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775921289, "uuid": "0bc78f13-35bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.65.11:41095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775921345, "uuid": "2cb7b241-35bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/889380751/9CfsjPu.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775921535, "uuid": "9df76c08-35bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stri3-hold.histo-ricthe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775921681, "uuid": "f55a35e2-35bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.22.233.45:52647/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775921889, "uuid": "7166a96a-35bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://piloroo.tremvaxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775921901, "uuid": "782fcbe8-35bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.228.87:54553/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775922193, "uuid": "266279ab-35bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://l1gh-scope.tremvaxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775922426, "uuid": "b1885c3b-35bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.98.41:34483/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775922546, "uuid": "f91469b9-35bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper-wag0n.tremvaxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775922909, "uuid": "d146baaa-35be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vrtnte.tremvaxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775923277, "uuid": "ac775c6f-35bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://l3tte-chain.tremvaxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775923383, "uuid": "eb934659-35bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.22.233.45:52647/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775923572, "uuid": "5c36d819-35c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelforgeum8.tremvaxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775923875, "uuid": "10fd888f-35c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ewgbx.qelto5rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775923940, "uuid": "37e9eae6-35c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.255.251.198:55895/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775924234, "uuid": "e72cd30f-35c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://apcsw.qelto5rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775924485, "uuid": "7c67103e-35c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.132.73:57623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775924595, "uuid": "bded8a11-35c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://portalproxy.qelto5rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775924827, "uuid": "48987b81-35c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/5876083921/RvqcM8C.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775924842, "uuid": "5160c06c-35c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.7.53:47629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775924952, "uuid": "92d3a6e4-35c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ppb9.qelto5rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775925196, "uuid": "2473c443-35c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://comp1le-mesh.qelto5rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775925440, "uuid": "b5c394bd-35c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.69.157.35:57869/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775925509, "uuid": "def9aac9-35c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.69.157.35:57869/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775925552, "uuid": "f8bf099a-35c4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://binaryrapid.qelto5rin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775925916, "uuid": "d1b50f02-35c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.132.73:57623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775925918, "uuid": "d2ee398f-35c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cjree.brinoxal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775926280, "uuid": "aa2c9da9-35c6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vorspireal.brinoxal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775926469, "uuid": "1b16394a-35c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.7.53:47629/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775926572, "uuid": "58cf0640-35c7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solcoreal9.brinoxal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775926935, "uuid": "30ca1730-35c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://velv0-sync.brinoxal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775927243, "uuid": "e864d191-35c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.112.142:42291/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775927296, "uuid": "07f3cd9c-35c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://7mpydp.brinoxal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775927652, "uuid": "dc0de38f-35c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://va1ue-hinge.brinoxal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775927980, "uuid": "9fe1d887-35ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vor-coreum.vexu3larn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775928311, "uuid": "6528ff1e-35cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stolively.vexu3larn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775928554, "uuid": "f5bda292-35cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rnacro-layer.vexu3larn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775928967, "uuid": "ebf55998-35cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brandquo.vexu3larn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775929332, "uuid": "c5d90ac1-35cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zencore2en.vexu3larn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775929569, "uuid": "52a8632b-35ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://y26me.vexu3larn.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775929987, "uuid": "4be94992-35cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yz16m.dravonix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930287, "uuid": "ff0a0da6-35cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neural-mem.dravonix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930535, "uuid": "92906884-35d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.160.188.11:40042/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930587, "uuid": "b1b1b509-35d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://canvoya.dravonix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930610, "uuid": "bf34c42a-35d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.244.9.195:58615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930793, "uuid": "2c5a41d1-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.149.237/linux_amd64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930797, "uuid": "2eeeb269-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.149.237/linux_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930802, "uuid": "31d756cc-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.82/aarch64", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930804, "uuid": "33420ffc-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.82/arm7", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930806, "uuid": "341e641b-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.182/s", "Tag": [ { "name": "CVE-2017-6074", "colour": "#B033E8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930829, "uuid": "41dc170d-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.149.237/download.sh", "Tag": [ { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930829, "uuid": "41e2a8af-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.82/x86_64", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930955, "uuid": "8cd134ba-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://s3.mgirbvre.top:8888/linux_aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930955, "uuid": "8ce8eebf-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://s3.mgirbvre.top:8888/linux_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930955, "uuid": "8ceca6be-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://s3.mgirbvre.top:8888/linux_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930955, "uuid": "8cf8e738-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://s3.mgirbvre.top:8888/linux_mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930961, "uuid": "9069c48b-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://s3.mgirbvre.top:8888/linux_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930965, "uuid": "92f79de0-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wzjc.ipwz.online/client", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Melofee", "colour": "#caa9ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930965, "uuid": "933259e5-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://s3.mgirbvre.top:8888/linux_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930966, "uuid": "93408ae5-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://s3.mgirbvre.top:8888/linux_amd64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930966, "uuid": "934884fd-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://s3.mgirbvre.top:8888/linux_mips64el", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930966, "uuid": "935059d5-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://s3.mgirbvre.top:8888/linux_386", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775930972, "uuid": "9702e63c-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://s3.mgirbvre.top:8888/linux_mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775931014, "uuid": "b029499e-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cliorgan.dravonix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775931026, "uuid": "b7022894-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wzjc.ipwz.online/run.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775931126, "uuid": "f31dc7a0-35d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.19.207:58927/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775931311, "uuid": "611dbe43-35d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://assay-hyp.dravonix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775931426, "uuid": "a5c9182a-35d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.19.207:58927/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775931560, "uuid": "f5b21b02-35d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.160.188.11:40042/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775931670, "uuid": "3712f795-35d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kajsn.dravonix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775931861, "uuid": "a8f0294c-35d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.157.222:49384/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775931975, "uuid": "ecda2c0b-35d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trivenos.plor9vexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775932223, "uuid": "80891eeb-35d4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.244.9.195:58615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775932334, "uuid": "c2a8e752-35d4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://suddentermin.plor9vexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775932690, "uuid": "9716b309-35d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumvalear.plor9vexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775932875, "uuid": "0536560d-35d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.232.213.24/z", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775932991, "uuid": "4acc4f34-35d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://networkmatrix.plor9vexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775933165, "uuid": "b23da841-35d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/6817977673/tAa2Ovs.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775933287, "uuid": "fb0d6877-35d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://g3norn-stream.plor9vexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775933657, "uuid": "d7b8675c-35d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.149.107.50:58319/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775933713, "uuid": "f9123a0b-35d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tcf5.plor9vexi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775933718, "uuid": "fbec228b-35d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.146.193:37624/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775933947, "uuid": "8482e331-35d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ancientrelay.kryntalor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775934314, "uuid": "5f0dd1c3-35d9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-vi5ua.kryntalor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775934672, "uuid": "346e8f4a-35da-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wildsoc.kryntalor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775934968, "uuid": "e5001a9e-35da-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c4nvas9-spool.kryntalor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775935026, "uuid": "07aa61d5-35db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.178.12:35167/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775935277, "uuid": "9d205b95-35db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.88.242.17:42778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775935391, "uuid": "e1261841-35db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sercoreis.kryntalor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775935395, "uuid": "e3b49d5f-35db-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.146.193:37624/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775935690, "uuid": "9356b745-35dc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl3a-leaf.kryntalor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775935821, "uuid": "e16d8869-35dc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.80.240:49217/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775935881, "uuid": "052327aa-35dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.144.28:44445/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775935992, "uuid": "47460603-35dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://misua.zexo4mira.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775936059, "uuid": "6f11268c-35dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.227.219.104:45584/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775936226, "uuid": "d29fda4e-35dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.239.112.39:8080/payload.sh", "Tag": [ { "name": "wraith-honeypot", "colour": "#e5caa8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775936349, "uuid": "1beed899-35de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://onp3.zexo4mira.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775936716, "uuid": "f712d03e-35de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thorn2-mark.zexo4mira.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775937014, "uuid": "a84925f0-35df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quarryaud.zexo4mira.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775937369, "uuid": "7bd47d03-35e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.191.137.44:35434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775937434, "uuid": "a2ed2acb-35e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://serlineex9.zexo4mira.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775937733, "uuid": "552a03e0-35e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tshrx.zexo4mira.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775937735, "uuid": "5625217d-35e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.32.74:58733/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775937858, "uuid": "9f60a962-35e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.191.137.44:35434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775938029, "uuid": "057526e8-35e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://45hd.veltraxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775938037, "uuid": "0a3ae7bd-35e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.80.240:49217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775938220, "uuid": "77290760-35e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.183.231:46154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775938330, "uuid": "b8d17cd0-35e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://d1rec-panel.veltraxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775938691, "uuid": "90472328-35e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://valueink.veltraxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775938987, "uuid": "403ff7d2-35e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://4sh-gate.veltraxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775939650, "uuid": "cba9aaee-35e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.165.118.34:37735/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775939652, "uuid": "cccb25ab-35e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdecj.veltraxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775939827, "uuid": "354ebfc6-35e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://uwz7.veltraxis.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775940072, "uuid": "c765bfb2-35e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://part1c2-flow.norva2xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775940367, "uuid": "773c4c07-35e7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://89gwwu.norva2xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775940911, "uuid": "bb2c730b-35e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.176.198:38994/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775940972, "uuid": "df52295c-35e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rp7gpk.norva2xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775941216, "uuid": "7128c4f1-35e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://obse1-cache.norva2xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775941221, "uuid": "743f78c1-35e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.101:50653/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775941279, "uuid": "96ddf548-35e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.208.144:40839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775941629, "uuid": "676fb58c-35ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://oew4ln.norva2xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775941870, "uuid": "f6994afc-35ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://velcreston.norva2xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775942170, "uuid": "a9d03b5a-35eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://edge1-layer.xelvorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775942527, "uuid": "7e25203f-35ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.11.151:39937/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775942529, "uuid": "7f79a4f5-35ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://host2-entry.xelvorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775942775, "uuid": "1254e7a6-35ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.208.144:40839/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775942827, "uuid": "311ddb42-35ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.59.163:54350/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775942831, "uuid": "33e53ca2-35ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://srv3-bridge.xelvorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775943191, "uuid": "09fa2211-35ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.114.23:44897/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775943308, "uuid": "4ff51f12-35ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://back4-unit.xelvorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775943317, "uuid": "55880f43-35ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.195.50.124:50673/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775943556, "uuid": "e3d2d864-35ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://site5-core.xelvorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775943732, "uuid": "4c5ff9fe-35ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://o3pjh3hs.paragonbloomera.digital/?=check&&actmn=FfuLBgyoRJuFgJJz", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775943846, "uuid": "90e7038d-35ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://net6-access.xelvorinax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775944150, "uuid": "45ae8aba-35f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://beam1-point.praxo6lin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775944513, "uuid": "1e439653-35f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn2-fetch.praxo6lin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775944523, "uuid": "2447b547-35f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.216.152:43118/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775944584, "uuid": "48a72b91-35f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.92.250:56453/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775944827, "uuid": "d9476032-35f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.200.59:52583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775944876, "uuid": "f6418c79-35f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dns3-check.praxo6lin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775945172, "uuid": "a730f36f-35f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://web4-proxy.praxo6lin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775945592, "uuid": "a16d3adf-35f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://log5-stream.praxo6lin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775945827, "uuid": "2d9239f4-35f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://app6-router.praxo6lin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775946197, "uuid": "09ccb196-35f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://part1-state.drumekal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775946253, "uuid": "2b98ca22-35f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.200.59:52583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775946489, "uuid": "b7d7ac08-35f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://load2-bal.drumekal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775946560, "uuid": "e286e95e-35f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.75.213:35606/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775946853, "uuid": "90dfdd93-35f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://db3-storage.drumekal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775946917, "uuid": "b6f63805-35f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.195.50.124:50673/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775947215, "uuid": "68f9eb96-35f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lan4-tunnel.drumekal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775947571, "uuid": "3d20aaa2-35f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vpn5-line.drumekal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775947578, "uuid": "4144e0ae-35f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.216.152:43118/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775947643, "uuid": "67e138dd-35f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.92.250:56453/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775947868, "uuid": "edca9636-35f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wan6-pipe.drumekal.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775948236, "uuid": "c92b71a0-35f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://key1-store.voxi3tral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775948592, "uuid": "9d97f28d-35fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://api2-patch.voxi3tral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775948893, "uuid": "50dcea00-35fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev3-track.voxi3tral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775949253, "uuid": "279a2864-35fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ops4-cache.voxi3tral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775949442, "uuid": "97f30393-35fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.206.235:50595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775949608, "uuid": "fadabd54-35fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://git5-pull.voxi3tral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775949621, "uuid": "0304ba2e-35fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.150.52:35183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775949914, "uuid": "b1af9baf-35fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ssh6-port.voxi3tral.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775950214, "uuid": "644bc1a4-35fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bit1-flow.krinoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775950396, "uuid": "d078c006-35fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.6.148:60969/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775950568, "uuid": "3712b470-35ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xml2-data.krinoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775950690, "uuid": "803679de-35ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.66.250:45019/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775950928, "uuid": "0e0e7761-3600-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://json3-io.krinoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775951227, "uuid": "bfdb9b77-3600-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tcp4-send.krinoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775951407, "uuid": "2b0c1646-3601-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8042875554/RvsamEB.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775951591, "uuid": "9928cf3f-3601-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.6.148:60969/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775951715, "uuid": "e3310dc6-3601-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.150.52:35183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775951826, "uuid": "253bd895-3602-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://udp5-recv.krinoxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775908989, "uuid": "684ca876-359e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "03wc5c.identify-celebrate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775911446, "uuid": "20cd7d60-35a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "0blj.di5honorman.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775932864, "uuid": "fee3e539-35d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.232.213.24", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775900224, "uuid": "ffe3f144-3589-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.249.199.4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775878025, "uuid": "5036b481-3556-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.32.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775944564, "uuid": "3c9a7da9-35f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.92.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775920624, "uuid": "7f5e8bc2-35b9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.224.228.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775950685, "uuid": "7cc83f56-35ff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.224.66.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775889125, "uuid": "28627b6e-3570-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.178.12", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775899985, "uuid": "71832861-3589-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.7.235.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775924827, "uuid": "486b64e1-35c3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.7.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775907365, "uuid": "a0122f34-359a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.109.218.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896024, "uuid": "389eeede-3580-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.113.206.200", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775905325, "uuid": "e03c00ea-3595-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.245.101.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775883425, "uuid": "e32f50a7-3562-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.106.68", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775908085, "uuid": "4d399c4a-359c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.251.51.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775944806, "uuid": "ccf689b3-35f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.93.200.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775888046, "uuid": "a4ef6ce1-356d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.153.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775907846, "uuid": "bea8f9e7-359b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.252.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775925424, "uuid": "ac889f6f-35c4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.69.157.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775889425, "uuid": "db6816fd-3570-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.202.178.70", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775931124, "uuid": "f1cf4f2a-35d1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.19.207", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910545, "uuid": "077fa5d5-35a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.27.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775919724, "uuid": "670e7362-35b7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.65.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775899925, "uuid": "4ddf2597-3589-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.29.145", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775898124, "uuid": "1c605562-3585-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.6.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775879225, "uuid": "1b84f06b-3559-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.249.185", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775949425, "uuid": "8dab6ada-35fc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.206.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916905, "uuid": "d6b49ad6-35b0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.25.132.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775866625, "uuid": "c5605a41-353b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.252.119.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775876525, "uuid": "d238e74c-3552-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.165.118.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775873945, "uuid": "d05e6818-354c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.130.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775881506, "uuid": "6b013f80-355e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.139.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775876525, "uuid": "d23900a1-3552-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.159.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775941265, "uuid": "8e332a4b-35e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.186.208.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775919785, "uuid": "8b1016e9-35b7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.187.177.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775874125, "uuid": "3b88079a-354d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.9.69.240", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775943305, "uuid": "4e39f0b5-35ee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.195.50.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775875325, "uuid": "06d8dfee-3550-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.50.197", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775931845, "uuid": "9f4012e7-35d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.132.157.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775918106, "uuid": "a23d3b40-35b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.23.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775920925, "uuid": "32784c48-35ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.98.41", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775880724, "uuid": "993a974b-355c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.148.192.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775911925, "uuid": "3dfb6e8d-35a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.157.162.220", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775884625, "uuid": "ae371692-3565-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.56.206", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930524, "uuid": "8c321840-35d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.160.188.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775905686, "uuid": "b73d8ee6-3596-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.24.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775892485, "uuid": "fae70856-3577-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.99.75.86", "Tag": [ { "name": "139-99-75-86", "colour": "#fbcde3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916305, "uuid": "70ca9b21-35af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "142.248.80.172", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775911085, "uuid": "4983917c-35a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "169.40.135.126", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775904125, "uuid": "153d7d36-3593-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.213.163.167", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775915885, "uuid": "76aec2df-35ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.225.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775921644, "uuid": "df62ed03-35bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.22.233.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916606, "uuid": "24190fd7-35b0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.148.112", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930765, "uuid": "1b761030-35d1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.149.237", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916305, "uuid": "70ca16f5-35af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.150.26", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775936044, "uuid": "66719a12-35dd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.227.219.104", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775885406, "uuid": "7f7a27a6-3567-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.157.47.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930584, "uuid": "afe276a4-35d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.244.9.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775913906, "uuid": "dae367f1-35a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "181.99.61.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775901184, "uuid": "3c21fb70-358c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.112.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775944506, "uuid": "19e132f4-35f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.216.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775894044, "uuid": "9c9046d7-357b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.40.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775883665, "uuid": "721227e5-3563-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.176.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775924465, "uuid": "70bdeebd-35c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.132.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775877725, "uuid": "9daaea46-3555-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.137.90", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775901725, "uuid": "7ed01d8e-358d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.122.47", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775888525, "uuid": "c2d95089-356e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.29.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775904245, "uuid": "5c6cdafe-3593-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.159.99.47", "Tag": [ { "name": "192-159-99-47", "colour": "#950ff7", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775911025, "uuid": "258da961-35a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "194.26.192.153", "Tag": [ { "name": "194-26-192-153", "colour": "#32b59b", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775917867, "uuid": "14157542-35b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1una-glow.nab2lamstibles.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916305, "uuid": "70ca41ac-35af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.26.98.67", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910244, "uuid": "5474627a-35a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.58.56.51", "Tag": [ { "name": "2-58-56-51", "colour": "#c38cf7", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775907184, "uuid": "349cd769-359a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "211.158.40.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775917386, "uuid": "f5424768-35b1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "216.126.86.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775879825, "uuid": "80e97b00-355a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.29.31.215", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775902565, "uuid": "73156f05-358f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.59.118.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887085, "uuid": "6827075d-356b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.39.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775937724, "uuid": "4fe60826-35e1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.32.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775905506, "uuid": "4c6dd72e-3596-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.185.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775899925, "uuid": "4ddf6017-3589-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.78.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916007, "uuid": "bf3248cd-35ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.247.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775902026, "uuid": "31d32c91-358e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.246.40.65", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775902026, "uuid": "31d31376-358e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "223.151.75.81", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775903345, "uuid": "443dde4f-3591-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.156.139.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775911925, "uuid": "3dfb8cf1-35a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.19.217.24", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775890445, "uuid": "3adb212f-3573-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.184.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916784, "uuid": "8e7fc237-35b0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.225.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775911385, "uuid": "fc2b4332-35a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.206.135.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775913725, "uuid": "6f217252-35a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.37.194", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775942825, "uuid": "2fdd03e5-35ed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.59.163", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775906045, "uuid": "8d4b7c77-3597-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.84.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775876225, "uuid": "1f235dbc-3552-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.220.89.216", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775903345, "uuid": "443defd8-3591-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.221.224.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775917447, "uuid": "19de023f-35b2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "2hvdt1.inven-tornon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775914806, "uuid": "f36f0835-35ab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "30qmgzf.cerbe7usout.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916305, "uuid": "70cabc04-35af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.56.229.232", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896384, "uuid": "0ec67199-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.49.217.42", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775917324, "uuid": "d0474ac0-35b1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.86.234.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775935864, "uuid": "fb1aa313-35dc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.144.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775869325, "uuid": "0ea6d502-3542-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.184.170", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775909525, "uuid": "a7d85512-359f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.91.58.255", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775942525, "uuid": "7d119ee5-35ec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.11.151", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775889966, "uuid": "1d720699-3572-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.150.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775884146, "uuid": "90919ee6-3564-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.172.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775879706, "uuid": "3a4f6e71-355a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.100.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896325, "uuid": "ebaa2687-3580-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.118.220", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775880305, "uuid": "9f3c2848-355b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.249.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775914985, "uuid": "5df87ecc-35ac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.87.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775917206, "uuid": "89d0767f-35b1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.93.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775869145, "uuid": "a31e1098-3541-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.102.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775950385, "uuid": "ca09d779-35fe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.6.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775914144, "uuid": "6911a094-35aa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.143.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775886125, "uuid": "2c07c9f6-3569-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.209.112", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775898065, "uuid": "f8dcf707-3584-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.202.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775938207, "uuid": "6f9116e2-35e2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.183.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775901785, "uuid": "a2346875-358d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.234.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775900764, "uuid": "41c3c68a-358b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "43.228.157.130", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775911264, "uuid": "b46950f7-35a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.138.16.142", "Tag": [ { "name": "45-138-16-142", "colour": "#e71b27", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775911264, "uuid": "b46929d1-35a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.141.215.100", "Tag": [ { "name": "45-141-215-100", "colour": "#4e1926", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896445, "uuid": "332459ac-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.156.87.140", "Tag": [ { "name": "45-156-87-140", "colour": "#90c6eb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916305, "uuid": "70ca7385-35af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.66.228.93", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775911264, "uuid": "b4691b05-35a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.83.28.4", "Tag": [ { "name": "45-83-28-4", "colour": "#fb304f", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775911385, "uuid": "fc2b44d1-35a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.83.31.215", "Tag": [ { "name": "45-83-31-215", "colour": "#4682b5", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775911564, "uuid": "672be511-35a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.88.186.229", "Tag": [ { "name": "45-88-186-229", "colour": "#b541da", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775938024, "uuid": "02863f6d-35e2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45hd.veltraxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775938984, "uuid": "3ee2f9b5-35e4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "4sh-gate.veltraxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775903946, "uuid": "aa99b1e3-3592-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "51tcb.accentol-federat.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775915885, "uuid": "76ae2e5e-35ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.37.0.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775885824, "uuid": "790d215b-3568-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.141.191", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775903226, "uuid": "fd516a2f-3590-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.208.242.90", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775871724, "uuid": "a4c5a161-3547-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.235.117", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775913845, "uuid": "b6b27b42-35a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.84.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775912224, "uuid": "f077ad26-35a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.253.228", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930765, "uuid": "1b75df6a-35d1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.89.163.182", "Tag": [ { "name": "CVE-2017-6074", "colour": "#B033E8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775936225, "uuid": "d22f07e9-35dd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.239.112.39", "Tag": [ { "name": "wraith-honeypot", "colour": "#e5caa8", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775927294, "uuid": "06bc15c1-35c9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "7mpydp.brinoxal.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775896565, "uuid": "7b1aeeab-3581-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.11.167.182", "Tag": [ { "name": "85-11-167-182", "colour": "#4442e1", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775940365, "uuid": "759f8e5d-35e7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "89gwwu.norva2xel.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775914025, "uuid": "21a89cb6-35aa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.106.18.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775872324, "uuid": "0a3ca926-3549-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.32.41.127", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775899329, "uuid": "ea615c3c-3587-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "active.solid-build-trace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775901368, "uuid": "a98b7350-358c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "agentsca.particu1silomer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775905445, "uuid": "27bce5a2-3596-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-5hip.accentol-federat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775933944, "uuid": "829e7f62-35d8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ancientrelay.kryntalor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775924176, "uuid": "c42bb7cb-35c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "apcsw.qelto5rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775900224, "uuid": "ffeea922-3589-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api.global-health-check.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775866265, "uuid": "eeef4efb-353a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api2-knot.exhib1torknot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775948587, "uuid": "9a65f01b-35fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api2-patch.voxi3tral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775872266, "uuid": "e7dcfaed-3548-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api2-score.creep-score.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775868125, "uuid": "43547af3-353f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api2-unit.consiliumundu-lat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775895125, "uuid": "20b8d1db-357e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api3-arch.solid-build-trace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775890925, "uuid": "5981aa76-3574-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api3-audit.global-health-check.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775876707, "uuid": "3e60093d-3553-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api3-auth.quick-support-portal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775888884, "uuid": "98f9dcd1-356f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api3-chart.urban-growth-data.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775892910, "uuid": "f8663487-3578-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api3-gate.prime-media-gate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775878745, "uuid": "fd1b5874-3557-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api3-grid.green-energy-flow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775880790, "uuid": "c05336e7-355c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api3-safe.smart-home-verify.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775884806, "uuid": "1a387dbf-3566-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api3-trace.travel-point-trace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775882829, "uuid": "7fb80a3e-3561-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api3-trade.local-market-hub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775886785, "uuid": "b57d7bb6-356a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "api3-work.office-task-sync.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775945825, "uuid": "2c672793-35f4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "app6-router.praxo6lin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910246, "uuid": "55b2f744-35a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arklith4os.di5honorman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775931305, "uuid": "5dcd4036-35d2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "assay-hyp.dravonix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775914447, "uuid": "1d5d9ac1-35ab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "asse9-point.cerbe7usout.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775943305, "uuid": "4e40fd6b-35ee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "back4-unit.xelvorinax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775918467, "uuid": "796361f5-35b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "banne-plate.nab2lamstibles.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775944145, "uuid": "42e01ea8-35f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "beam1-point.praxo6lin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775925550, "uuid": "f794c2f0-35c4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "binaryrapid.qelto5rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775950207, "uuid": "6046519c-35fe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bit1-flow.krinoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775928964, "uuid": "ea643662-35cc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brandquo.vexu3larn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910784, "uuid": "966ce147-35a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bundleser.di5honorman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775909706, "uuid": "13e3e09d-35a0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bwglxvk.di5honorman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775902565, "uuid": "731bdfe3-358f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "c34pp.particu1silomer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775934964, "uuid": "e25d18fc-35da-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "c4nvas9-spool.kryntalor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775891413, "uuid": "7bead023-3575-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "caifulai.oss-accelerate.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930584, "uuid": "afea8020-35d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "canvoya.dravonix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775939649, "uuid": "cafbf4c5-35e5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cdecj.veltraxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775944506, "uuid": "19eb6dea-35f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cdn2-fetch.praxo6lin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775907607, "uuid": "30b86720-359b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cdr35.identify-celebrate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916127, "uuid": "06a9b5ad-35af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ciphersha.inven-tornon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775925915, "uuid": "d0eb0650-35c5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cjree.brinoxal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775935688, "uuid": "92130153-35dc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl3a-leaf.kryntalor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775873885, "uuid": "ac8f576d-354c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clean1-api.don2tdouching.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775931009, "uuid": "acf2107c-35d1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cliorgan.dravonix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775925190, "uuid": "2093eb62-35c4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "comp1le-mesh.qelto5rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916784, "uuid": "8e93b812-35b0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "convoynoble.inven-tornon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775910426, "uuid": "c098e0c1-35a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "crateeast.di5honorman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775915590, "uuid": "c6b6e32b-35ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ctlxx5r.cerbe7usout.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775938327, "uuid": "b6f4a331-35e2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "d1rec-panel.veltraxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775909289, "uuid": "1b2f3f0c-359f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "d3ns-sheet.identify-celebrate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775946850, "uuid": "8f6b4539-35f6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "db3-storage.drumekal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775948891, "uuid": "4f7521b4-35fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev3-track.voxi3tral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775944870, "uuid": "f2ad3348-35f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dns3-check.praxo6lin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775891412, "uuid": "7b9645e1-3575-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dows.1v5s.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775920446, "uuid": "151aa74a-35b9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dyn-markal.histo-ricthe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775878085, "uuid": "74067c7f-3556-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "eco1-trace.green-energy-flow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775942165, "uuid": "a67e6ab4-35eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "edge1-layer.xelvorinax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775905096, "uuid": "57e3980b-3595-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "epgl608r.accentol-federat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775923873, "uuid": "0fa00cbf-35c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ewgbx.qelto5rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775902212, "uuid": "a11d8254-358e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "f3rn-dock.particu1silomer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775919847, "uuid": "b00751c2-35b7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fexbfw.histo-ricthe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775899746, "uuid": "e3265042-3588-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "file.prime-media-gate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775911807, "uuid": "f7a64def-35a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fixthicket.awry-pause.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775903530, "uuid": "b2987a23-3591-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fjor-dis.accentol-federat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775906650, "uuid": "f62eed23-3598-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fjordvine.halturitmel7ed.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775919485, "uuid": "d889775f-35b6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fs1zh.nab2lamstibles.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775918047, "uuid": "7f21da57-35b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "furystaff.tech" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775933285, "uuid": "f9b65d35-35d6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "g3norn-stream.plor9vexi.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775871907, "uuid": "11661c5d-3548-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "game1-log.creep-score.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775869505, "uuid": "7a163b5b-3542-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-hub.consiliumundu-lat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775873584, "uuid": "f966af24-354b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-hub.creep-score.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775889850, "uuid": "d890a3e0-3571-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-main.urban-growth-data.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775875627, "uuid": "bae07dc5-3550-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-way.don2tdouching.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775881750, "uuid": "fc3c1231-355e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-way.smart-home-verify.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775895906, "uuid": "f20431f2-357f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-way.solid-build-trace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775885824, "uuid": "7913942c-3568-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate6-way.travel-point-trace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775898911, "uuid": "f11f6358-3586-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate7.solid-build-trace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775915887, "uuid": "780d4929-35ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gatewaybalance.inven-tornon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775934308, "uuid": "5b514b5d-35d9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-vi5ua.kryntalor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775907125, "uuid": "11461d0c-359a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geyseropen.halturitmel7ed.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775949606, "uuid": "f9a2b8a7-35fc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "git5-pull.voxi3tral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775912767, "uuid": "33cd4b42-35a7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "harvestfern.awry-pause.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775876227, "uuid": "20791e66-3552-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "help1-sync.quick-support-portal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775880368, "uuid": "c4ba4869-355b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "home1-verify.smart-home-verify.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775942525, "uuid": "7d3a407b-35ec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "host2-entry.xelvorinax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775875265, "uuid": "e33695ed-354f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub5-base.don2tdouching.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775871306, "uuid": "ab3c3074-3546-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub5-gate.pestte1ex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775891949, "uuid": "bbbcfdb0-3576-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub6-gate.global-health-check.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775883724, "uuid": "9563c258-3563-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub6-gate.local-market-hub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887805, "uuid": "15be01cb-356d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub6-gate.office-task-sync.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775893869, "uuid": "34197955-357b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub6-main.prime-media-gate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775877725, "uuid": "9db9caa4-3555-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub6-main.quick-support-portal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775879771, "uuid": "60e37ffc-355a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub6-relay.green-energy-flow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775867526, "uuid": "de2dd96f-353d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub6-secure.exhib1torknot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775922544, "uuid": "f7e7f6d7-35bd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyper-wag0n.tremvaxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775886125, "uuid": "2c135752-3569-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "job1-sync.office-task-sync.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775950926, "uuid": "0c6ac49c-3600-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "json3-io.krinoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775931667, "uuid": "353fde28-35d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kajsn.dravonix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775923569, "uuid": "5ac371db-35c0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelforgeum8.tremvaxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775948228, "uuid": "c461519a-35f9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "key1-store.voxi3tral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775891413, "uuid": "7c0eba25-3575-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kkk-214125124.s3.ap-southeast-1.amazonaws.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775922185, "uuid": "216e4522-35bd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "l1gh-scope.tremvaxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775923273, "uuid": "aa2d9e5a-35bf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "l3tte-chain.tremvaxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775947212, "uuid": "6709f035-35f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lan4-tunnel.drumekal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775918885, "uuid": "727e13a8-35b5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lexckh.nab2lamstibles.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775897107, "uuid": "bde25e64-3582-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "linchens.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775916488, "uuid": "dde244ff-35af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "linric.inven-tornon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775946487, "uuid": "b6db8e13-35f5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "load2-bal.drumekal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775945590, "uuid": "9fd9ec5b-35f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "log5-stream.praxo6lin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775904311, "uuid": "83e298e8-3593-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lqwstnf.accentol-federat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775932688, "uuid": "95a3b6dc-35d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumvalear.plor9vexi.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775912165, "uuid": "cd4062c9-35a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "majofres.awry-pause.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775935987, "uuid": "441dc6f4-35dd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "misua.zexo4mira.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775921165, "uuid": "c1c1501a-35ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mskho2rr.histo-ricthe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775908626, "uuid": "8fdadcea-359d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "narr-que.identify-celebrate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775917149, "uuid": "6837f592-35b1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-th1cket.inven-tornon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775943844, "uuid": "8f9f648a-35ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "net6-access.xelvorinax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775932988, "uuid": "48768914-35d6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "networkmatrix.plor9vexi.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930285, "uuid": "fdebfb39-35cf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neural-mem.dravonix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775888530, "uuid": "c5770260-356e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node2-area.urban-growth-data.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775880550, "uuid": "31375785-355c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node2-check.smart-home-verify.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775876465, "uuid": "aeb1a4ef-3552-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node2-desk.quick-support-portal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775894650, "uuid": "0587ddbf-357d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node2-draw.solid-build-trace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775890510, "uuid": "61cd5c2b-3573-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node2-info.global-health-check.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775870165, "uuid": "03565122-3544-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node2-info.pestte1ex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775882465, "uuid": "a6f619fb-3560-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node2-list.local-market-hub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775884447, "uuid": "43d95627-3565-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node2-map.travel-point-trace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775878505, "uuid": "6e4facc3-3557-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node2-power.green-energy-flow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775874306, "uuid": "a7c5271c-354d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node2-soft.don2tdouching.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775892546, "uuid": "1f85a8bd-3578-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node2-sync.prime-media-gate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775886489, "uuid": "04fc80fa-356a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node2-task.office-task-sync.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775868545, "uuid": "3db6ea41-3540-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-link.consiliumundu-lat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775872565, "uuid": "99dcacdd-3549-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-play.creep-score.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775866506, "uuid": "7e336d9e-353b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node3-view.exhib1torknot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775914150, "uuid": "6c512a2c-35aa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nornexix2.cerbe7usout.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775908269, "uuid": "bb4ff5fc-359c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "npcmrc.identify-celebrate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775913125, "uuid": "092fabea-35a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ntcecfct.awry-pause.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775943729, "uuid": "4ad5d37d-35ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "o3pjh3hs.paragonbloomera.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775941209, "uuid": "6c9aa095-35e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "obse1-cache.norva2xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775941627, "uuid": "65eccb09-35ea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "oew4ln.norva2xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775936347, "uuid": "1a98b03a-35de-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "onp3.zexo4mira.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775949250, "uuid": "25a736ff-35fc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ops4-cache.voxi3tral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775897107, "uuid": "bde0adbb-3582-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "outel.linchens.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775918166, "uuid": "c5f2c966-35b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "p1xel7-cast.nab2lamstibles.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775946194, "uuid": "084e92f9-35f5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "part1-state.drumekal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775940067, "uuid": "c3fc8b8f-35e6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "part1c2-flow.norva2xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775921885, "uuid": "6ef30a1c-35bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "piloroo.tremvaxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775894290, "uuid": "2f1a73d0-357c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "plan1-data.solid-build-trace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775871545, "uuid": "39bbef87-3547-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "point6-svc.pestte1ex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775924592, "uuid": "bc360262-35c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "portalproxy.qelto5rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775924949, "uuid": "916c0b43-35c3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ppb9.qelto5rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775901965, "uuid": "0d722101-358e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "processthor.particu1silomer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775891290, "uuid": "3293073d-3575-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "purpule.exphelp.life" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775920626, "uuid": "809c2f9e-35b9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "q16zhmu.histo-ricthe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775907908, "uuid": "e3b10291-359b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qbknlas.identify-celebrate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775920931, "uuid": "3655525e-35ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qu4rry0-track.histo-ricthe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775937010, "uuid": "a6309701-35df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quarryaud.zexo4mira.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775912407, "uuid": "5d602b82-35a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qyfx7uy.awry-pause.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775900825, "uuid": "6617c1d3-358b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "relay.urban-growth-data.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775906285, "uuid": "1c53a5f9-3598-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "reportmeadow.halturitmel7ed.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775903172, "uuid": "dcf9121d-3590-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rive-wag.particu1silomer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775928550, "uuid": "f368dd4e-35cb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rnacro-layer.vexu3larn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775940965, "uuid": "dbb074a0-35e8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rp7gpk.norva2xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930945, "uuid": "86d431bf-35d1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "s3.mgirbvre.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775919186, "uuid": "26206297-35b6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sapcave.nab2lamstibles.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775935389, "uuid": "dfa217bd-35db-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sercoreis.kryntalor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775937424, "uuid": "9ce4f2d0-35e0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "serlineex9.zexo4mira.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775882109, "uuid": "d2a88a47-355f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shop1-data.local-market-hub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775865844, "uuid": "f3fde2b0-3539-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "show1-data.exhib1torknot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775943545, "uuid": "dd7902bd-35ee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "site5-core.xelvorinax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775926570, "uuid": "57609467-35c7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solcoreal9.brinoxal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775942825, "uuid": "3041fabc-35ed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "srv3-bridge.xelvorinax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775949912, "uuid": "b029104f-35fd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ssh6-port.voxi3tral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775928308, "uuid": "6386a8bc-35cb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stolively.vexu3larn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775921525, "uuid": "986d19bb-35bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stri3-hold.histo-ricthe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775913788, "uuid": "94e5b4b6-35a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sub-5ecure.cerbe7usout.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775932331, "uuid": "c1057a62-35d4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "suddentermin.plor9vexi.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775874906, "uuid": "0cf773bc-354f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4-relay.don2tdouching.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775870946, "uuid": "d520f03e-3545-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc4-relay.pestte1ex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775869209, "uuid": "c97df6ac-3541-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-base.consiliumundu-lat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775867228, "uuid": "2c8020ea-353d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-mark.exhib1torknot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775873225, "uuid": "234a6cc0-354b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-match.creep-score.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775891590, "uuid": "e58d234d-3575-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-relay.global-health-check.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775883490, "uuid": "09b14ad8-3563-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-relay.local-market-hub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887505, "uuid": "62ec16d0-356c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-relay.office-task-sync.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775893568, "uuid": "80bcfaac-357a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-relay.prime-media-gate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775877425, "uuid": "ea72bb9b-3554-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-relay.quick-support-portal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775881391, "uuid": "26aa0249-355e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-relay.smart-home-verify.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775895608, "uuid": "407964c3-357f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-relay.solid-build-trace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775885525, "uuid": "c69960ad-3567-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-relay.travel-point-trace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775879410, "uuid": "89921037-3559-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5-solar.green-energy-flow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775901006, "uuid": "d213dda1-358b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svc5y.prime-media-gate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775902808, "uuid": "03d64600-3590-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tawg.particu1silomer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775933709, "uuid": "f6460057-35d7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tcf5.plor9vexi.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775951224, "uuid": "bdf795ec-3600-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tcp4-send.krinoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775867884, "uuid": "b3c4e9c4-353e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "team1-work.consiliumundu-lat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775890211, "uuid": "afe27a28-3572-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "test1-api.global-health-check.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775869927, "uuid": "755b4fa0-3543-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "test1-api.pestte1ex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775936705, "uuid": "f0889423-35de-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thorn2-mark.zexo4mira.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775904725, "uuid": "7a8c54cd-3594-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tokencouri.accentol-federat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775913489, "uuid": "e2327853-35a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tri-mesha.awry-pause.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775884087, "uuid": "6d6b32e9-3564-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trip1-point.travel-point-trace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775931966, "uuid": "e7c3d906-35d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trivenos.plor9vexi.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775937729, "uuid": "5261cddd-35e1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tshrx.zexo4mira.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775951825, "uuid": "243146eb-3602-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "udp5-recv.krinoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775939825, "uuid": "3424aea9-35e6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "uwz7.veltraxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775927647, "uuid": "d95e9c74-35c9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "va1ue-hinge.brinoxal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775938687, "uuid": "8d9ed018-35e3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "valueink.veltraxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775874605, "uuid": "5a053b32-354e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault3-info.don2tdouching.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775870525, "uuid": "da286af9-3544-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault3-io.pestte1ex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775872865, "uuid": "4c6a82ca-354a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault4-data.creep-score.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775879107, "uuid": "d4ffc720-3558-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault4-data.green-energy-flow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775866866, "uuid": "54b67ccb-353c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault4-file.exhib1torknot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775887207, "uuid": "b10f46a3-356b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault4-file.office-task-sync.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775893211, "uuid": "abf25567-3579-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault4-file.prime-media-gate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775877006, "uuid": "f0c7a6af-3553-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault4-file.quick-support-portal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775881086, "uuid": "70c76304-355d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault4-info.smart-home-verify.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775868906, "uuid": "14c62006-3541-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault4-root.consiliumundu-lat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775883131, "uuid": "33a9e22a-3562-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault4-root.local-market-hub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775895367, "uuid": "b09f3523-357e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault4-root.solid-build-trace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775891225, "uuid": "0bf65fdd-3575-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault4-safe.global-health-check.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775885171, "uuid": "f3952e5e-3566-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault4-sync.travel-point-trace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775889185, "uuid": "4bdcc3e7-3570-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault4-sync.urban-growth-data.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775941865, "uuid": "f3c59970-35ea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "velcreston.norva2xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775926932, "uuid": "2ee948a8-35c8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "velv0-sync.brinoxal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775927953, "uuid": "8f5c3857-35ca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vor-coreum.vexu3larn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775926271, "uuid": "a53456ea-35c6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vorspireal.brinoxal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775947567, "uuid": "3ac90382-35f8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vpn5-line.drumekal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775922905, "uuid": "cefcc2f6-35be-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vrtnte.tremvaxis.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775915408, "uuid": "5a6eaded-35ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vvest0-path.cerbe7usout.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775911144, "uuid": "6cc09ed4-35a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vvi1d-line.di5honorman.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775907489, "uuid": "ea21d544-359a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vvorke-core.halturitmel7ed.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775947866, "uuid": "ec8df597-35f8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wan6-pipe.drumekal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775905872, "uuid": "266af665-3597-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wb9g.halturitmel7ed.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775892253, "uuid": "70ea507e-3577-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "web1-media.prime-media-gate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775945165, "uuid": "a2f86fb5-35f2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "web4-proxy.praxo6lin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775934666, "uuid": "3104bc82-35da-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wildsoc.kryntalor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775891290, "uuid": "328e4813-3575-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.iuiouernb-oss.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775930949, "uuid": "894718cb-35d1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wzjc.ipwz.online" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775950565, "uuid": "358c6acf-35ff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xml2-data.krinoxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775929565, "uuid": "504b93de-35ce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "y26me.vexu3larn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775891414, "uuid": "7c933256-3575-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yangyangoss8.oss-cn-hongkong.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775891412, "uuid": "7bbb7346-3575-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yl9vr1j.oss-ap-southeast-1.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775929985, "uuid": "4acd9c03-35cf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yz16m.dravonix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775929326, "uuid": "c24e7254-35cd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zencore2en.vexu3larn.in.net" } ] } }