{ "Event": { "published": true, "date": "2026-03-07", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-07", "timestamp": 1772928923, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "5c9bf21d-2aeb-40fc-82b9-ba16ab16b93e", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9f05193-19b8-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772841741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841741, "uuid": "c918e575-ce23-4da1-9c54-fc0731163c59", "comment": "Malware payload (Mirai)", "value": "71dbdaed262fff6f61cd265c9e91dc43", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841741, "uuid": "526c9209-aad4-477f-9e5a-0135e3b45691", "comment": "Malware payload (Mirai)", "value": "40ecc5dfd9303a36754443afa232239e63f8101acec453029077ac703a8a3942", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841741, "uuid": "9be5075f-d886-4f87-a1e1-c23bc6df32be", "value": "T18B430100D9888B0EE80AA1764DEBB54B4F91CF07419A4378B91038EE4855FFE771CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841741, "uuid": "14a24db2-4ff9-4008-943f-4cfdc881a306", "value": "1536:c1xGfwcfwFBJ9u4Grx3CVg8X2SVwAr9hIlw7nouy8Eys:c104swFBvu7rMf9hnouti", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772841741, "uuid": "4771c755-d1da-4eb2-8bcd-1dc25bac74c4", "value": 57376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841741, "uuid": "d6ab0063-dbd5-43f3-b17f-1506c63ed00a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9f0d1e3-19b8-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772841741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841741, "uuid": "c2b4b608-fe89-4552-be1c-1d90d7dbd392", "comment": "Malware payload (Mirai)", "value": "30f95d85b5c0af8dbf3f1a6daf858928", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841741, "uuid": "94a5b591-dbd0-408c-9976-59437a67d48c", "comment": "Malware payload (Mirai)", "value": "da5c870b9d7d7d4ca4f65f5a32af71627add436fd70568c0c72bf0462da45225", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841741, "uuid": "13d27741-4c46-4c30-b21e-0d3ce2e0baea", "value": "T17EF3AE33D4787ED8C5609074B0B19E781B93B1A441571FFB69EAC179408BE88FA097", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841741, "uuid": "abb5e8ac-f115-442c-9a6e-0aa03c3ba10e", "value": "3072:7MfgNCxzXrNJDPfxtP7AGLLUqhL1tmOJIWsRmZE+U:7MftrvPkGLLUqhJ5RsWEb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772841741, "uuid": "f0275017-d32a-4bcd-9a31-867dbb01bd51", "value": 172488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841741, "uuid": "7311f404-abf3-4311-85b5-16ba74a957c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9f32c99-19b8-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772841741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841741, "uuid": "aae885d4-b8d3-4dc7-8324-645b9ee83731", "comment": "Malware payload (Mirai)", "value": "169b35edb886253668defb0308fa128e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841741, "uuid": "2c192c66-2f79-458e-a011-91d1e10776d9", "comment": "Malware payload (Mirai)", "value": "858d9659183cb8eaea14a8a391ef319cd723f1b6e5dba04adbfb799c8e3bbd73", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841741, "uuid": "568954b3-b61d-408e-a9b9-539db395e38d", "value": "T1C96302ED62FD2E35E7F23BB5D4AD98812B6D0DFCCA711B383C640761591818FA9184", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841741, "uuid": "61316c9b-d6b0-4fd1-82bc-756c232f5cf0", "value": "1536:S2vblfb+bvzRmT5JmpENlL/IOk8dt0ucb+8XcIjcfQQiLDLzo:SklfbqNefMENlL/I96t0r+8XcIjzV0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772841741, "uuid": "9b6c7003-0dac-4317-8557-55ffe93c9176", "value": 68584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841741, "uuid": "bcce373c-5055-4695-b5cc-f4f4db32b675", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9fe56c9-19b8-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772841741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841741, "uuid": "a9f5252d-ed81-4418-8e88-860745509892", "comment": "Malware payload (Mirai)", "value": "fbf2023b705954610d18e8ba06db4180", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841741, "uuid": "92529f15-6700-49a1-87c7-de53d17b0004", "comment": "Malware payload (Mirai)", "value": "a440e99058ffc70197aa54fa7210b2be4fcb5d5362d93337c03a207ee74bb37b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841741, "uuid": "b5b37814-e7c5-43d4-b92d-1ed9dbf4e3a0", "value": "T139630205358A6E8050F06071293D12892F7E9DB483A97CAF2BD07ED40996F12EF7E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841741, "uuid": "c75a648c-a8e5-4ae9-af0d-bc5bf29dd5ae", "value": "1536:EL4alwQipqopwTzz3y/b09RHeytPlvhUL9:EjyQipqopwTzzz9RHDZhUL9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772841741, "uuid": "f16b29b8-5da4-4b46-8ee3-076248e10101", "value": 73148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841741, "uuid": "2ff2cf0e-6b96-4972-bd51-6a437a7a1e2b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b543ce8-19b9-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772841797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841797, "uuid": "ca328c04-abec-4949-84c8-7470aba91dc3", "comment": "Malware payload (Mirai)", "value": "6153ee6d531b14948d41eb91c47776d5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841797, "uuid": "fd142b63-dac4-4673-836c-4da97e6cfa19", "comment": "Malware payload (Mirai)", "value": "a6d8c472a507c244e06a73fe1e8003615cb034f1cee6cc74cac7438ef3403ec8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841797, "uuid": "864822a2-db04-415a-b81a-483f00a6465c", "value": "T1FAF2F055EB4CBAA0DBB00030DD2881DA629A073CF1FBB52737A252949A1488F35DDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841797, "uuid": "401ca6ab-2516-4b3a-ae82-60e54ec6b1f8", "value": "768:KmmSKZ3AZ1Pul6z4ZYjZHMuFzRD1uZOuvtiwEpoes3Uoz22:jduZEZHJdRD0Z91Pzj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772841797, "uuid": "9c9b8941-a25e-417f-81c1-03789a76c551", "value": 34752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841797, "uuid": "d5f1e887-4e41-4b74-bec1-317f3294fa2a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b555c87-19b9-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772841797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841797, "uuid": "65dc60f3-7805-4870-994a-47023f1d795a", "comment": "Malware payload (Mirai)", "value": "5d77199857bb2725ac38aaf61fbee408", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841797, "uuid": "072adde3-5a6f-453b-9b38-56542fdfe62d", "comment": "Malware payload (Mirai)", "value": "b22a444bb34943a37174a987c86179ed58d51e961130b0e397735306eddfc638", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841797, "uuid": "23bf47e6-7d5c-4a28-863e-6b6539c366ce", "value": "T1A273025DC3CDE39B44FAECB3403537369965B802B2A9070D53FBAC0CB65C969A40AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841797, "uuid": "c2abe705-22bd-42bc-8135-6b2690c1d8e8", "value": "1536:d4Pe0BFJ46H4ilCoy7VrfzjYOvStMSux8UF42oJAsheCJY195k:6Pe094/bjgFuxl6JH4195k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772841797, "uuid": "39abf330-2e77-467a-86f0-e30ee68ecd50", "value": 77340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841797, "uuid": "db3a2d51-220f-43fa-8037-b43aa4eadea6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b62bc55-19b9-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772841797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841797, "uuid": "9f35a218-3799-406d-bbac-7646a4904928", "comment": "Malware payload (Mirai)", "value": "99ebf95ded1aca5e3ebc09928e177623", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841797, "uuid": "bd1c53ff-32b7-4401-88e6-a03dc447ba5e", "comment": "Malware payload (Mirai)", "value": "073933625bf9f2f7b3c93d43ccbdef7c8500af30cf43a1e5e0537760760d8b1f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841797, "uuid": "e8ab81e2-6931-4ee3-8412-06e3c2ed1211", "value": "T145144CD7F800CDBDF80FE73A84174906B131B3A21493473B625BB967AD3619A4963E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841797, "uuid": "fc9ca3fb-9d70-4e1b-a88e-47ffae5112d7", "value": "6144:EZLStPJrsYTW/48G9J6umB5W7C6LbKypzkwdm:xFW/425gZkR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772841797, "uuid": "8ce55d1c-fef4-40ce-9b9c-7e16de87442a", "value": 203808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841797, "uuid": "d3949b9b-35f2-42c5-ab98-f6d9e562d8af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3351dc56-19b9-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772841864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841864, "uuid": "894d812e-95d9-4f22-b196-ce660b88ebdd", "comment": "Malware payload (Mirai)", "value": "bb44ca1c028021e568f3cb68e6d72747", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841864, "uuid": "316b21b5-df3a-40d9-8443-856e20c425a9", "comment": "Malware payload (Mirai)", "value": "1cdb1a474d1aa7301ceb137f09083aff05c597694651ca123ff37f8777f82356", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841864, "uuid": "41eaddd1-d5bb-4148-a471-cdfcad651834", "value": "T1B1931235CA0EDEBCD581053AF5C8C6C1B28924286EF2F7CA118B974DEB521F2096C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841864, "uuid": "6cfa375f-2f7c-4c5d-afde-242c6fd658c5", "value": "1536:o5BTFsAwvJvjzmV/WQ0nuGWbgKxcYgmflYBp7PkLwvRuNZFX8m3bZ0uGi2aU:UBTzkdpQgTYglYt0pzkLwZuNLMmrZ04s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772841864, "uuid": "1e174f6a-3929-43a6-852d-91a6ba3849eb", "value": 90696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841864, "uuid": "55a9de01-b3d0-4c63-a029-ef7ce0d41792", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33571a23-19b9-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772841864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841864, "uuid": "2eafcea3-25a1-4151-a367-2204b0e9fd4a", "comment": "Malware payload (Mirai)", "value": "fe9aea913017d2b6650267411343677b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841864, "uuid": "7f12af16-5c2c-4ecc-b27d-fbf00e8c1b7c", "comment": "Malware payload (Mirai)", "value": "9d06ee531c3857aa7d8923fe498c130d32315e4ad9be4d2c811d1fed384be12f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841864, "uuid": "7371c377-9e84-4b85-8231-1c679dec1d1d", "value": "T15273F1571522809ED612D2B74AEC0FAE19773DC36E83B549A9B0EA5626C21CE6D0BC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841864, "uuid": "fec7e71b-7fe3-47ad-8ece-b63d3b8accc3", "value": "1536:edHuY/4jd4up2YRoRv22poT310nGfcNqLv9s3vPYwEVJu8t:edHuY/4mhKqnGfcNgv9OPREVQ8t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772841864, "uuid": "2edac20f-f49c-482d-b6e3-023818e4309a", "value": 73920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841864, "uuid": "fc89a6e0-0dca-44c6-9fd7-c11283d7eb80", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1772842398, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772842398, "uuid": "31f218d5-9425-4ea4-ab56-eb98b9ddb109", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772842398, "uuid": "0f642c69-ba1f-47b6-8e71-7994efeb7edc", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772842398, "uuid": "1c79614e-9430-496d-9091-46332b7d2e82", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772842398, "uuid": "6dcb468b-e720-4369-99c2-c22b04dd15ed", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772842398, "uuid": "675ce436-aef2-4de8-9273-d8f128d9bea4", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772842577, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772842577, "uuid": "80462349-49fe-4ae3-8e90-aa86c20a7a32", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772842577, "uuid": "175ad3dc-b8de-495c-b357-186f5e2174b7", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772842577, "uuid": "bf7047ed-c581-47fc-85ec-2acaee0b6ffd", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772842577, "uuid": "78668744-3245-49c9-a702-cf1194ec8a90", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772842577, "uuid": "cf2c1247-549f-4aa3-9f2d-9d5e91edb312", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1772842879, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772842879, "uuid": "e3818ac1-395a-4dd1-9384-0f4004e35f55", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772842879, "uuid": "6af6c0f5-f616-4280-8dca-95453565b64f", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772842879, "uuid": "1744ffc9-7d89-48eb-90f0-f467f7bb6c67", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772842879, "uuid": "6d46f337-661f-4df5-919e-c51778f2fe0a", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772842879, "uuid": "cf65b1fd-f78e-4400-8206-828371c99f33", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30fca158-19c8-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772848303, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772848303, "uuid": "6edda224-50cd-4f36-abd0-52a3601d3a73", "comment": "Malware payload (Mirai)", "value": "481b05d81bf0db2fc0ab99de260b1caa", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772848303, "uuid": "29f5b591-d7d8-4195-b456-8282fc1f5df1", "comment": "Malware payload (Mirai)", "value": "b0635a6f452c4ccb33d6672d623c5ca29da63dda5f8fa6f85b595fa0f3d0cc87", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848303, "uuid": "65334d07-b261-4f7e-ac1f-67b7bd8f69f4", "value": "T1B9F38536B7618E77D80ECE7305A985121C8CD98B02D92B6FB2B4E558E76BD4F08D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848303, "uuid": "d6f30a8f-100b-482b-ae2e-550ef8c30902", "value": "1536:LI2eTHyQUqTeVT/gCn7uasyN/ZikYN2MqCiClZaqq8phhmrTimPaL2lqvP7Nb:cjyQosC/NDCLux8FmrThPaL2IvP7Nb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772848303, "uuid": "50c2a892-0878-4bc2-8984-296e4e7e336f", "value": 159678, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848303, "uuid": "e6f350ee-2f6b-4710-8a83-2f7b423dd24d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd1687d9-19a1-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772848532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772848532, "uuid": "ed7a5a75-285d-48c0-8a1d-619aac7d25b3", "comment": "Malware payload (Mirai)", "value": "e8cd8fa829a847d102f60d009ed2b42a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772848532, "uuid": "69930af4-6911-47de-b3ff-dff5560c3cba", "comment": "Malware payload (Mirai)", "value": "eca46aa0994f2c5f649927342f510174f40964e2c686fd0d8345af0dde8f4f81", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848532, "uuid": "cc49b0b1-269b-4901-8a8f-bc4127fce0b3", "value": "T133C3F872B800DF66F40B96B604E78B227E30BFA74E631662731B39669D331D52867F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848532, "uuid": "33e394f8-d655-4b8d-aabe-97a90eb95cd2", "value": "3072:qSHslvkvr8501VB69VQ4ylDPArSmm/Qcud+1ninNb:qU/I501VMZylz2Smm/Qcud+1ninNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772848532, "uuid": "992a3ca1-16e0-4028-aaa4-d4d0670171de", "value": 119140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848532, "uuid": "945d7c13-a083-481c-9cb6-d3d08eaa701e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e5c0cde-19c9-11f1-8a4c-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1772848808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772848808, "uuid": "b5c12d52-ef90-44e8-9646-239839cee16f", "comment": "Malware payload (ConnectWise)", "value": "73eae41e54d25628c1f5db82b115e085", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772848808, "uuid": "7171c533-260b-49dd-af2d-9bf26eb09fb6", "comment": "Malware payload (ConnectWise)", "value": "c86ac6b5625e0b1045332d12b9ee696e723726027f79c09ee2d7df5304eff33e", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848808, "uuid": "23ba02dc-dd11-4310-8c44-e1a2518c71ea", "value": "T1E5D623226AFE8599F8F35F34FD7A99A5853ABC248D62C01F1325780E1972B4186733", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848808, "uuid": "0cfae84e-b84f-4d1c-bfc3-a2c84e1b4185", "value": "393216:AcVPOBdgcVPO4cVPOCcVPO9cVPOGcVPOYcVPOh:AcVmBdgcVm4cVmCcVm9cVmGcVmYcVmh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772848808, "uuid": "025858d4-578b-467a-9655-5f77c518bd8b", "value": 13676544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848808, "uuid": "f78e93a2-fe7a-40c3-a233-9a8ff36420e1", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa9f27e7-199d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772848876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772848876, "uuid": "e90d9b32-e93c-4371-9331-4d49031b97dd", "comment": "Malware payload (Mirai)", "value": "6de423acee8448c2c4d2a957e1fec89d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772848876, "uuid": "8e4ab840-0b48-4f75-a6ae-e02966482625", "comment": "Malware payload (Mirai)", "value": "f995aeb621b7b8df35484e81c54de0c6792a598f8c656b4ff338fec438b64232", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848876, "uuid": "12bb839c-f4de-4145-bc03-a4e49fbc7bc1", "value": "T121E32A34D4104B2BC2D213FAA69E825E3F321F97939733115734BAB41FE279E1E699", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848876, "uuid": "fd5efe56-7839-492f-a90a-b24bbdc3a1ef", "value": "3072:A942CJmadzppbMD4epyyKP598IGzMeRkmhxQwK8SwNu:OFadzp2yyKPAkmhxQwK8SwNu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772848876, "uuid": "d9a8e7f5-6648-406b-bf8e-a19a34260af9", "value": 144133, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848876, "uuid": "316170ea-9228-4dd1-87b1-4989234c82b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "908e5df9-19c9-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772848892, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772848892, "uuid": "f21b8588-c533-42bd-852f-9b1a5387cf19", "comment": "Malware payload", "value": "0b470cf022856842d800ec953836ebfe", "object_relation": "md5", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772848892, "uuid": "40432615-f1f7-4ce3-89cd-d704a9b05847", "comment": "Malware payload", "value": "3d258a0a14ba3bd6d72d1198f29f87ddfc5cc77b87c5c6bab603aa07e2898aa5", "object_relation": "sha256", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848892, "uuid": "d3e92eed-5f19-4176-9cb0-09b693c22011", "value": "T13F0733545573AFC46D22B06F31A06A2D1946BFD3C2B941E15299CFF9FC49C23C20E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848892, "uuid": "c4ad64de-ab71-42c0-b460-1a156a1f6e50", "value": "393216:FO7VgWk8OKdmyE2n2KBE71JAReVU3ud0KPW8eta1u9:FO7VgWk8vwr2npUO8/d0KPZeQ1i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772848892, "uuid": "7a2144db-37e2-4fa2-b8b3-59de1df2c7a5", "value": 17030241, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848892, "uuid": "f802ab2a-87c3-4b9e-bb0c-96bc488dd38d", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94b7bbe0-19cb-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772849758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772849758, "uuid": "f020e9a6-5d91-4898-97b0-4d08c3d80e76", "comment": "Malware payload (Mirai)", "value": "c6642f362922aa33adbb40bbac2ded34", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772849758, "uuid": "135894c3-69a8-472f-99c5-e865d37f7e62", "comment": "Malware payload (Mirai)", "value": "7a3267f244ea2a3edaee6b4016e7a9e6e6573ac786b56e70114819c351590ddd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772849758, "uuid": "527cdb77-862f-42b8-adb6-5684d97ae4e9", "value": "T16FF3F745B8519B17C6C516BBFF5E42CC772A2798E2EE7203CD256F20378B95B0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772849758, "uuid": "5b3f1fd2-6e4d-46f4-8a77-7d756d16e7e3", "value": "3072:348PX40ZbWAJkzBLuHX/89WT5l4/kwQ3NjxOUfN/o:37PX4WbWAJkzBLuHX/89WNl4/xQ3NdpG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772849758, "uuid": "2fcc2de6-4a6c-4240-8f01-eb70c4517de7", "value": 164728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772849758, "uuid": "ee457cf1-5b50-4661-b740-7500e97269d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8fcfa3de-199d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772849850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772849850, "uuid": "a0865e9e-3432-4b83-bb0b-f78c04dee109", "comment": "Malware payload (Gafgyt)", "value": "a3abb9e3599401dbdf178dfb3ec426e4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772849850, "uuid": "30cb87df-67f8-41bc-ba1b-f7b6563edb0d", "comment": "Malware payload (Gafgyt)", "value": "9c8c14784dc66d7d300088372243f04446544a55511c55ba45f72215a2f26e73", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772849850, "uuid": "e824e44b-262f-4488-a85b-fa9f6a9dbaf1", "value": "T13ED3F831E804471BC2D227FAE79A429E3F361E9757D733155A38B9B02FF27891E295", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772849850, "uuid": "bd1ff6cb-4b2e-4ff0-a9ea-757fe82c3e50", "value": "3072:NHmSOBIJd+15kUr3HOmEUr6lcmP46aQyhYlfKINb:jOSd+j3HOmocmP46aQyhYlfKINb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772849850, "uuid": "20d9744a-2210-4d09-854b-40e9f3d1a9d9", "value": 132684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772849850, "uuid": "117453cd-8702-4d51-b25a-7f46cee2e8c4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa4889da-19cb-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772849929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772849929, "uuid": "bca8f032-b630-4874-bf68-1b8252c7ab41", "comment": "Malware payload", "value": "349ac81792bd0ca81919e18b4786e6b8", "object_relation": "md5", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772849929, "uuid": "5a09082b-805d-42df-b877-a62f8d321842", "comment": "Malware payload", "value": "9635a1485df837e42d64f82095536ed45364d6af1d820b8107855e3be352e1b4", "object_relation": "sha256", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772849929, "uuid": "1a018a4c-4324-477a-9b93-16c73a21f2ff", "value": "T117E507216E0A86C042474C78EC57F138FC051C66E557090E315AEBCBD9299EA8EBF7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772849929, "uuid": "b07e2192-012b-4fdd-9f74-653188c919a0", "value": "96:ixxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx8:3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772849929, "uuid": "bf7dab3f-ef0b-46b1-83e2-1b910b3f813d", "value": 3278884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772849929, "uuid": "ff2ac06a-d2a4-420a-8b9d-4a478bec3862", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ac3749b-19b2-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772849936, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772849936, "uuid": "8014661d-91c7-44a8-8f2a-a27f9930b425", "comment": "Malware payload (Mirai)", "value": "353dc61374e69ba74192778525db70f7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772849936, "uuid": "f83566a5-fb1f-4ab4-b40f-765efab62754", "comment": "Malware payload (Mirai)", "value": "154e1a90d2a10c17d62ddc5933a45f2ea1aeeb13f8d93f450c70c423e8910f60", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772849936, "uuid": "f7e37474-f3cd-47d0-a071-b9c974510e7d", "value": "T1EAF3853E7A11AFBEE168827107F29F70CF9529D326A19381E26CF6185E7128D0C9F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772849936, "uuid": "24443c73-6903-4fe3-baa8-0b78dc96bbab", "value": "3072:G103/L7OBjwobENT7nfIvT7JmrThPaL2IvP7Nb:s0JfQvxmrThPaL2IvP7Nb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772849936, "uuid": "a2338339-b7a9-4f9f-b32c-069c64c1e969", "value": 159678, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772849936, "uuid": "f7a6bb5b-650f-4684-a6fc-400abcea3d42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68d1423e-199f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772850239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772850239, "uuid": "aaed3a0c-303b-470e-904d-17454a83af22", "comment": "Malware payload (Mirai)", "value": "f7e7436bd9112599b1d2e21266b188d9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772850239, "uuid": "2da1b81f-959f-4b3c-bd84-d11879efe814", "comment": "Malware payload (Mirai)", "value": "19d872e13e242f6d0ac4a41916dc1138efdad28a2ce4f51c15fe1ca0c362cb62", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772850239, "uuid": "d98e3458-b26a-4fec-9d61-87f728c30a2e", "value": "T1E2B30877A4604FB6C041A5F125BA9D310F12AD931F5F1A94723CBAB04A3B5CEB84EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772850239, "uuid": "166d9400-e7b1-462f-8d45-797a1f368b19", "value": "3072:N8osRyHt6h0XhCENFbPrLxT3FPmH1cuOvvni2N/:N8ocyHt6KrPrLxTxmH1cuOvvni2N/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772850239, "uuid": "e55ef6d0-c27b-4f0a-897e-dac03df56b78", "value": 112751, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772850239, "uuid": "bc1d711f-812c-40c3-893d-5fa163b81924", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf060cdc-19a1-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772850454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772850454, "uuid": "38e01b8a-aa78-476e-ae86-713119166b7b", "comment": "Malware payload (Mirai)", "value": "ccb89b37e830f822e5d3711621ba8845", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772850454, "uuid": "a6d264a1-b0a7-4f51-b300-050ee462911b", "comment": "Malware payload (Mirai)", "value": "85f14e5b653e95e442a16eddc38bf0e895a47fb26c1ecc4f23df54cd5c7d3608", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772850454, "uuid": "19d46ef1-078e-48a2-acef-01166c46c168", "value": "T1BCB32977A61C0B43C49B55F02CB77BF28F69ADA312A611C0A209FEC05B73AF12551F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772850454, "uuid": "f31f399f-8eb8-4ad0-a63f-e5df629a8d98", "value": "3072:X3FM0rpGAJluQs2c+GCbid/mm/Qcud9HnirNb:X3O0rUAJAQs23GCG5mm/Qcud9HnirNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772850454, "uuid": "1eb39f8f-f923-441d-8cb1-11ec0619bb7e", "value": 118004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772850454, "uuid": "5d8eae68-87d8-459a-a66a-ea7b267c988d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6c36cdc-19cd-11f1-8a4c-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1772850675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772850675, "uuid": "f7b67040-f4c5-4cbd-84d8-6fae911fd075", "comment": "Malware payload (CoinMiner)", "value": "ac65b89c09bbb53406dad3d42915c231", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772850675, "uuid": "604d7109-58a9-439d-8d02-4b5e1c41673f", "comment": "Malware payload (CoinMiner)", "value": "7d6032764df8e706c458e663e5501ce627e4f2985c16ea61e299f2ac429cbcc9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772850675, "uuid": "3ef04bc1-cb57-4f4c-85c0-70223df162c0", "value": "T18E5533F1D73B8258F9F250666AFA424062B773B37A0CF9360510BC6C2564AC6E60B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772850675, "uuid": "c8754c0a-135c-4feb-9b9a-c012470c79fa", "value": "24576:5IrSo8lbGgoJWdBfZlTp8hz5bWTLIKV6x4WjyBgZbMrdo98hqrpi+FBOjMQM+:5IrLqbSJM5ZlShz5uIKVGvjyAD9kqrps", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772850675, "uuid": "bef483d5-4809-48a2-bd66-ce1f8c39b2f8", "value": 1309300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772850675, "uuid": "15f02ec3-224f-4958-a248-cc7fded491ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8477eb7d-199d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772850921, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772850921, "uuid": "6d9c7553-2f5b-44ae-a873-ac7397606433", "comment": "Malware payload (Mirai)", "value": "06838c1091298310b8f7d2f4d59203c2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772850921, "uuid": "19496fea-9347-4d48-a611-091e4a6e7535", "comment": "Malware payload (Mirai)", "value": "094e9d6ee057d38f40c35f018488e35ab6ccd006ed261b17322e78fd5ea2c0cb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772850921, "uuid": "7d824341-b328-4999-b264-acd7c107d8b3", "value": "T1F1B30737A691CA3AC04752F12AEBD9729C13BCBF0732214A33D47D656F368C61D99B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772850921, "uuid": "50b6b0bd-a827-42be-b490-bae573cdf91d", "value": "3072:jir5l8kbD6FHemRUOx9mgWRKHDXvJ3QEP7GzjHVmaFHJp28fpm7FnVqJwXFWnNb:CbD6FHemRUOx9mgWREbJj7oZ9hm7FnV4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772850921, "uuid": "526dccfb-38ed-4427-931c-fab05dd51eb3", "value": 117649, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772850921, "uuid": "d9f21136-b2a8-46a8-9452-7b67c7697d94", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01922654-19cf-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772851230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772851230, "uuid": "0e5d270c-36a5-4b9a-aca8-79d4bcb9c076", "comment": "Malware payload", "value": "f9a0a3501f16fbcaca78e4b8541c91c2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772851230, "uuid": "70bc5a61-66a3-413c-acdf-e07670c5f58a", "comment": "Malware payload", "value": "d9e8e6bc2df1863b3d9be74f77f5fe79d30647248b0a0271c658c79cadeebb09", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772851230, "uuid": "f92f85ae-31f9-4059-bc79-c35c5ab5a807", "value": "T13EB6CFEF36DC252AC83441B3C88DB57966974D7A5F43DA822C08372C34B36F45B49A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772851230, "uuid": "b1656f63-0cbb-4a20-9ed1-fa7b6e217dbe", "value": "196608:8eTwsB3eipjUw2Lh/rJbqkKXjdeQuJ0SIT5zkn/DX7d4SLgb91v:8eT/OMUwmhqbXjd7Umo/DX7d4SLYH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772851230, "uuid": "382777c9-d47a-4823-8f2a-d142894b6831", "value": 11231233, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772851230, "uuid": "25a4e838-5a17-4259-825f-f874ed4b94d6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a301fee-19d0-11f1-8a4c-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1772851700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772851700, "uuid": "0e6cc578-8fd5-464d-9f59-138f2678c18e", "comment": "Malware payload (RemcosRAT)", "value": "838fc6f476d198f4d771d167a02f5a50", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772851700, "uuid": "71271961-2c41-4519-8bec-df04a57e41d5", "comment": "Malware payload (RemcosRAT)", "value": "ae43c84b6303b2e60cdbd681ac8cf6eb4acf9b9a0155a37299d49bdabd7d0a52", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772851700, "uuid": "d577fae0-ea9b-40ab-9fdc-e0fc115bbc72", "value": "T1BAE5328B0AE0DE76F6AB4822D744B1F48A264C7638E36FD734A55AD9C8047D73B425", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772851700, "uuid": "0599581d-48d8-4027-93b3-94fb5dd25751", "value": "192:Z+J00VTwEqi/uhIuxBiMPG01czxZWU3uhqyl3uhqyLikPWEUM5Y0Ec0c2w0uI2Pu:ZDD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772851700, "uuid": "489294aa-1aa1-4c76-82dd-cbaa214f94ad", "value": 3080645, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772851700, "uuid": "1c972eb3-6440-429a-a646-0ce47fe0a126", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc76e175-19d0-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772851973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772851973, "uuid": "e53f8bd5-4103-4056-8a35-9d59c855c7fa", "comment": "Malware payload (Mirai)", "value": "5cba114f28e7a560e1d5b5bb4fa3cc98", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772851973, "uuid": "fe538285-9eff-4fa5-bad9-4ddfda1c72ea", "comment": "Malware payload (Mirai)", "value": "794f475f14bbab00f7a8b1d698f9919f0ec81b07c594507f702382c4006ad08e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772851973, "uuid": "9b61264a-5b94-4006-a0f1-ce453fd7779c", "value": "T18124A75E6E228F7DF668C73447F74A31A76D23D627E1D684D2ACC1101E2434E642FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772851973, "uuid": "65c78944-ea50-4474-8ba1-f14938cb8ee7", "value": "3072:ufcgRj0E+1s91YrfcWYsvvH95DZ/H9DRWxeQbB0AigxvS8JRC:ujonsnEfJvvd5L0x/beAzvSW0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772851973, "uuid": "81b8003d-58b4-4cff-b67f-1a76dd1d99db", "value": 225176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772851973, "uuid": "195bfaf2-5394-415e-97b6-7f63cc76a2a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4723a24b-19d2-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772852635, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772852635, "uuid": "49d75fd2-8aa5-463c-a0b0-516101d4d6d3", "comment": "Malware payload", "value": "c38e1f53b35c147c04a0a5327fe4b41a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772852635, "uuid": "51559997-2f22-49da-be65-aa34e6cece88", "comment": "Malware payload", "value": "940e86f64125c6befd8cb0fc87e06ae5b7927423d79b3d14578b14768b0122e8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772852635, "uuid": "5d0e0bf1-bbaa-4416-a232-2bd3a857d080", "value": "T17B93093274AF052A166F436E80427B1CEBA982DBC601DBE8F4FD51595FF4D8932672", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772852635, "uuid": "3137369c-4108-4fed-9914-efb1972f2a2f", "value": "1536:pXyp1xQ/uwMmAIa14oXs/I8epeV7tb73WAxCJCStkb5fvnw05S4jrmipPsCZKD6i:pisIbzEStkbFvnw05S4jrLPsCZM6Y/7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772852635, "uuid": "0298bde7-57f5-4ab0-a2b1-605ea4340b71", "value": 96308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772852635, "uuid": "0c37e6ac-29f3-462a-a909-fff5217759c2", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5369d5e9-19d3-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772853085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772853085, "uuid": "9b45d405-f628-4293-b6cd-c1bfec25c6a0", "comment": "Malware payload", "value": "3a1b8913e6842d2d8062ad9ea8e00250", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772853085, "uuid": "81dfaf7d-ee9e-410a-89a5-1a400704e5cf", "comment": "Malware payload", "value": "0432fcab4c5b99feb58ca14c2854d1fcf727d2627712066cb53720060a8a9505", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772853085, "uuid": "53361630-c5c4-4835-8f3c-4d57fe2e2fb1", "value": "T1358308327589582A210B028FD263336C70FFD8E2D611E5B6F6F922344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772853085, "uuid": "b4185803-7d43-4c1f-93d9-970db2452c4a", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnoWa1VN/:XEKltp9t2SX/yr2pboWgVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772853085, "uuid": "ae8aa884-6e8a-4fe8-b1d2-aa50e661400e", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772853085, "uuid": "2b40fd6e-aa76-4b18-92dd-3c880b0bd8c3", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff48fc2f-199f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772853530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772853530, "uuid": "e2e1d0fa-7a2d-4225-b056-66d45bbd543f", "comment": "Malware payload (Gafgyt)", "value": "3a3e10ed339fac1250cd80076485b592", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772853530, "uuid": "d3bb48eb-d597-48e9-b568-b61e8462c627", "comment": "Malware payload (Gafgyt)", "value": "b5ed6f13acd8271d9ec55eea3386b1e63163a425ee221011644fc289dab7f944", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772853530, "uuid": "1c576331-a4c4-4e10-b382-a03245b0e581", "value": "T1DFA3F832E643C6B3C44306F101A7EA6B0D21BE67093A9A89E32D7CB4AF334C67555F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772853530, "uuid": "ab763c72-3ba8-44b7-afca-516bc642a2c8", "value": "3072:gxh3bYcTa9RPls9xwut8zIU9mmFVcqIRGnDFT:gfUcOqXt8zIU9mmFVcqIRGnDFT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772853530, "uuid": "42dcc686-9530-42ec-b4cd-96f313a1a110", "value": 104252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772853530, "uuid": "e15457db-2893-421f-9f47-87905db201c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7b20741-19d4-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772853656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772853656, "uuid": "85224c18-2897-4207-b4b3-00c6263830bd", "comment": "Malware payload (Mirai)", "value": "a370e350db79d9cc652590946b9ecc04", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772853656, "uuid": "c04e98a7-d63b-40c1-a554-5cad6509e8e3", "comment": "Malware payload (Mirai)", "value": "05f12b8ecb8e4efbba6b329bec7d734634b496df802b44f9edef43ae63267482", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772853656, "uuid": "653e6681-6c34-4c46-82c4-01a9a628e543", "value": "T1BAF30845BC519B17C6C616BBFF5E428C772A2798E2EE7203CD156F20379B85B0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772853656, "uuid": "695e3416-832b-4f52-864c-3a1365860644", "value": "3072:xnzPRz2ARfG3x4N0p8gIdV9iDxZ4i0BUY2I0emfncpO:xzPRz2ARfG3x3p8gIdV9iFZ4iQUY2I0R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772853656, "uuid": "6efe4ac4-ff1d-40cd-af8f-81228a338c24", "value": 161176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772853656, "uuid": "fc9705b8-9123-4340-9c21-37fb17f44a54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b252da6a-19d5-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772854103, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772854103, "uuid": "b3f67c2a-8c7c-450f-aaab-b773d31e87fc", "comment": "Malware payload", "value": "c9ee8b296d22424eeb55b12775bd33e7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772854103, "uuid": "7434de12-dccb-4fca-b498-8c37da060552", "comment": "Malware payload", "value": "0c26c222a5f4e74aa32055fd5651e0f71e9c2ef08fc19fc4ba1dec6645bc4bbd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772854103, "uuid": "a69c832d-fbb7-48bd-8237-c1099de72cbc", "value": "T13924A50AAF610EBBD86FDD3706E90B4635CCA50722A43B763574D928F54A50F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772854103, "uuid": "9dcab659-4081-44d9-997b-18936715ef4c", "value": "3072:M47wz8e+9Lh878qZQ5aHbGm9QXAbVb3ojnTFWo2:M47wu9hrqqaJqABQnBW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772854103, "uuid": "b0348cb5-c208-46c3-b123-734a034ed90f", "value": 228696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772854103, "uuid": "b41b49a3-9ca9-4b0e-8a98-ea806f55c687", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5277b83-68b5-11ec-9b74-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1772854274, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772854274, "uuid": "d6de2fc9-e768-4bab-be15-05c69f0670ac", "comment": "Malware payload", "value": "05127008ddc73ccf64c067fbf04d56f2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "fat1", "colour": "#edd8dd", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "lip124", "colour": "#BBCFE5", "exportable": true, "hide_tag": false }, { "name": "Neconyd", "colour": "#f3f32e", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "rob136", "colour": "#5765b6", "exportable": true, "hide_tag": false }, { "name": "SilentBuilder", "colour": "#708a1e", "exportable": true, "hide_tag": false }, { "name": "tr02", "colour": "#e32a4b", "exportable": true, "hide_tag": false }, { "name": "Trickbot", "colour": "#334db4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772854274, "uuid": "94324b07-8e06-4cad-808c-ef8ea68b2ee8", "comment": "Malware payload", "value": "f914b9eca1b06fac49b04ddc2c9e24e2832f75f84f97fbc7595e2f9ceaeb5645", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "fat1", "colour": "#edd8dd", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false }, { "name": "lip124", "colour": "#BBCFE5", "exportable": true, "hide_tag": false }, { "name": "Neconyd", "colour": "#f3f32e", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "rob136", "colour": "#5765b6", "exportable": true, "hide_tag": false }, { "name": "SilentBuilder", "colour": "#708a1e", "exportable": true, "hide_tag": false }, { "name": "tr02", "colour": "#e32a4b", "exportable": true, "hide_tag": false }, { "name": "Trickbot", "colour": "#334db4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772854274, "uuid": "dc4fa35b-4b05-4a9d-8d7f-a38cc77fc8b0", "value": "T1F841B5DAE322A9D9C6B334FA365294C55E53225B8E75CF087E21C07C0089AB496D0F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772854274, "uuid": "fe0e667a-4d35-4b72-a3f3-250a1d916c12", "value": "48:qbUT8PA3RAGvm+SkUpE+lkGekbt0RNEtaq4F0ZnYcowWPa:qwwPcm+xokGekbtCwa33a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772854274, "uuid": "5f87d11c-fef6-4557-ac15-3b64cabd8812", "value": 2367, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772854274, "uuid": "0af1f813-6e01-48f7-b196-b5827a8e100b", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8115a06e-19d7-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772854879, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772854879, "uuid": "6a59fcd4-634b-4050-b48d-324051c852b0", "comment": "Malware payload", "value": "92b4461aafeaea0a1614e1d760919d8a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772854879, "uuid": "b5597a52-4b2d-42a0-a758-0221d4f740eb", "comment": "Malware payload", "value": "c150bda49724097d0e4d57f90378e0b625114f3064d526024f74b9a71e2d1298", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772854879, "uuid": "21175ee9-db8e-4a7c-bac8-4cae738b1649", "value": "T1AC0733A17CD4F34EDCA99438C8B163F041EB0EEDF6315417A4A5BF6637B6283D28A4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772854879, "uuid": "878a6726-3de9-4d68-aa80-dfb8fe37454a", "value": "12082e77cfc7e34f96f21f95764c8ac3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772854879, "uuid": "9b4892aa-6391-4eb7-95e5-91090eab8eb9", "value": "393216:1zHH/onJNw32VNelklzfhf+kpv5JwuFUvmB8ld8eVDOgwtEI0ppjagOibnaEHE:1znQnMA88tL5JhUvmOl2eVDOgXOgOijY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772854879, "uuid": "4251f69a-add2-4458-a767-d5f4cf377a7a", "value": 17745264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772854879, "uuid": "d67ae064-d698-41bd-8d7e-6718e5656b47", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5def612-1053-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772857208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772857208, "uuid": "a3b62e53-e6b6-4d80-b8f4-128cd4e9af78", "comment": "Malware payload (Mirai)", "value": "c4477fac81ee6e98631aa0b28a1fc35d", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772857208, "uuid": "efe30412-5227-44e7-bd00-ea01fd06cdb5", "comment": "Malware payload (Mirai)", "value": "577501bc8e4dd6ce74fe4496624a3c568457e210c724d01cb87eb874cceac511", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772857208, "uuid": "523a60a0-afc7-4ded-8060-97e8e591ffd0", "value": "T1CF33F1AE96E68FC5E4756131980E27438928B3A707C4C897F5CC31B68B7B7611B1C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772857208, "uuid": "7b1aae3d-7b6e-4203-aa8a-0f9464e9083e", "value": "1536:K81XwgDknGmc/9uUADvvtasqb2Mfo4JOdEJnouy84:j1hknGmc4Ri2Uo4EEZout4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772857208, "uuid": "008d102e-22eb-4c8b-9632-e82b13fcfb96", "value": 52748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772857208, "uuid": "4a42d576-b59c-49e6-b987-7b4b3cb011a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f8dad34-1058-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772857208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772857208, "uuid": "b42f2c96-507f-46b0-afa2-3ec54298e0b2", "comment": "Malware payload (Mirai)", "value": "6b6e457dc195a08cfe9ef759b072a414", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772857208, "uuid": "39c2c856-6e54-4f4b-8e3b-6ab6b371c5b1", "comment": "Malware payload (Mirai)", "value": "6dad85b41766565cbca069f8ef55f2140081e10e9ac2ab5f992977d88afc20c8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772857208, "uuid": "70ba313a-6806-4e13-9e59-3751ec549365", "value": "T1FE63022EEB47A785DF68DC7ED0AD02142E4C6489161E0E1DE3B14DC8CB21EC9F85D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772857208, "uuid": "f340c71f-6e1d-4254-aafd-796f63a1619f", "value": "1536:xNQXvfpiDy8Mu25Di3SqRJF74nHNjx7ibzaU97TCs0jpF0KrR7dI0+LH:xeX3txu2xgXN0ntjx7eznDAF/NIj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772857208, "uuid": "0c415413-d4dc-4837-a84e-138c52f7bc8d", "value": 67780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772857208, "uuid": "28c8e4c0-7e8f-4e41-826e-64af59bc98d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f29ed7ca-1057-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772857209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772857209, "uuid": "5092d43e-fe47-4a52-a1cb-2fce2bde406f", "comment": "Malware payload (Mirai)", "value": "63abea2e238e5fbc62efaaca3c1e6235", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772857209, "uuid": "b3242d05-d63d-4c94-8a53-63a09211cc0d", "comment": "Malware payload (Mirai)", "value": "08733e9ad76233bde5c63adfa861aaca62d542c1eac4cb2bb02d2fd78a9baa13", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772857209, "uuid": "3f149f48-b68a-4594-b2b0-291083605e6a", "value": "T18D53F1D6624A664EFCA384F396D953E87F774E23F6810C0429ACD2CBC4265E1B4C9B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772857209, "uuid": "9569b92a-e952-43b8-8a4d-e357a21bdbd3", "value": "1536:ivsNVnBECay3WAH8ByWyW1bCQ0QfA5qR2tQydlbmSVSs:iUHnB1H8BJy60/KCVj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772857209, "uuid": "862fae07-4bde-4c67-a1c2-098bbb918a11", "value": 65284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772857209, "uuid": "ed95041e-57a9-488b-968f-8cc36fd2947a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772859668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772859668, "uuid": "d2bfb317-cd9f-4b3e-9f5d-4ac33a902741", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772859668, "uuid": "8093b364-0223-405d-9ccb-53b44131d2cd", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772859668, "uuid": "37ed8f0e-6018-48c0-ba67-b53cc0c201f4", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772859668, "uuid": "58914c6f-bc6b-4a61-999d-4fbe2c72b3da", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772859668, "uuid": "5f0eb8d6-fbb8-4c2d-b0a5-02fe50b4c031", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "802c31a5-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1772860032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860032, "uuid": "fbb2dcef-1318-4724-b9c3-1372e3f75d40", "comment": "Malware payload (ConnectWise)", "value": "edb9019ca46a74958352f947ba133031", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860032, "uuid": "bb82fc85-5a71-4583-8a66-0e7a00c5a90c", "comment": "Malware payload (ConnectWise)", "value": "90876b3f9084e0679aac234e57dc9d82c4b09121dc3de6852491d84f85ad5f6e", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860032, "uuid": "031ce883-5673-41fa-8a4e-bf7ad01c7839", "value": "T1E4A6237127F88429F1A75B39EE3A89E22938BC64DA26C05F17743D0E1971E509B723", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860032, "uuid": "6ee0b0cc-30c1-4329-960d-cd718b6ae3ee", "value": "196608:5KaLNkbgLi4QsKaLNkbgRKaLNkbgHKaLNkbg:dWgLiHCWg1WgfWg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772860032, "uuid": "18b448d7-11ce-4b9d-a452-6a7e3a083c8b", "value": 10072064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860032, "uuid": "17d614dd-6fa1-4d2d-8cf2-ad6c73057374", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82def6d0-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware payload (AteraAgent)", "timestamp": 1772860036, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860036, "uuid": "8671fd09-c7ba-4038-bd70-2742d4fbca21", "comment": "Malware payload (AteraAgent)", "value": "063e7372a2a99fa35745f41904d188f1", "object_relation": "md5", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860036, "uuid": "ed2d080d-4869-4006-9550-0b170fb82fa4", "comment": "Malware payload (AteraAgent)", "value": "3077d335b4d51417fac291f1ce9cbb61ecc8cd893194a0292b0f2be5bcf45ad3", "object_relation": "sha256", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860036, "uuid": "98f508c7-fdb7-401b-bb33-dfd11aea8557", "value": "T13A862318FBE009AEE5778276C56A8520EA327C8D3720C54F47A4B6295F3B7A075BF7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860036, "uuid": "c83eb3fa-f94b-4850-8377-2861de64ab67", "value": "196608:3W/FMmnGYLnWgziirlb4/ieF3GrAfedpvCs3md8r:qMqGYLpZreF3G82yc6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772860036, "uuid": "cbeb2211-8193-49ba-a4dc-c2a440bd2691", "value": 8601600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860036, "uuid": "6e925530-fcd7-43c3-aa1f-2f0e695adcb0", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc8afa76-196a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (AteraAgent)", "timestamp": 1772860692, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860692, "uuid": "fda70b92-fa47-47ef-b75b-fe739bb176f9", "comment": "Malware payload (AteraAgent)", "value": "241918f70447c5870d3ac2fc8593c615", "object_relation": "md5", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860692, "uuid": "aeb3e325-1829-420a-ac4b-05b029839d86", "comment": "Malware payload (AteraAgent)", "value": "42b9d965bbcdbcd98dd4104379e46b23c5238fe4dc23b3ee5cf8689435ddfd55", "object_relation": "sha256", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860692, "uuid": "11aded26-d124-4580-b122-1a1a400faba9", "value": "T1AF862318FBE009AEE5778276C56A8520EA327C8D3720C54F47A4B6295F3B7A075BF7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860692, "uuid": "5fa910e9-22cc-45f0-86b1-0c4de054ea10", "value": "196608:WW/FAmnGYLnWgziirlb4/ieF3GrAfedpvCs3md8r:RAqGYLpZreF3G82yc6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772860692, "uuid": "b52528f2-5637-4861-a728-5df58f3d8a78", "value": 8601600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860692, "uuid": "86f74ad8-fa20-4ec1-a3f6-664948a40ed1", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e374a2b-19e5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (GoToResolve)", "timestamp": 1772860700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860700, "uuid": "d9889103-9771-4878-9a26-27b338ebe8c1", "comment": "Malware payload (GoToResolve)", "value": "288d1f5710de93e1a7996d43f051f8c6", "object_relation": "md5", "Tag": [ { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860700, "uuid": "9f45b985-6e37-4708-a6fd-6ab4012ff096", "comment": "Malware payload (GoToResolve)", "value": "c6a09cbbd82ccf6a85d570f2f8606777984ae26e8394a2645bf195c4b60ad8dc", "object_relation": "sha256", "Tag": [ { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860700, "uuid": "f8abe038-78e7-4934-9897-0db1cc819c2e", "value": "T11D37336231858031EAED0172DA58DABE816D8C314F6145DBF7ECBBB85B343D26B326", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860700, "uuid": "7916364f-8f82-471e-a78e-16c69ae90817", "value": "393216:zu2TfDZAmE5tCLWTK5O6xGtGBcu8Djj+HWabd1cHkHVNuZ3IjA+bn1yGDH82PPbL:qErOtUWTKFMtGBai2UrcHk1NrE+pq2Pn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772860700, "uuid": "c0522a3d-f91c-49dc-93fc-685ac2edbc6e", "value": 24526848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860700, "uuid": "f9eb8e2f-9bfc-4f60-8fd2-15bb4ea9f4bc", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4fa63576-19e5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1772860809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860809, "uuid": "fce13ed3-81c4-4c61-909b-727b7e16dfea", "comment": "Malware payload (QuasarRAT)", "value": "75c3b29dd351228bab20770474e8f93a", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860809, "uuid": "266264fc-bf00-4412-a134-71675d043229", "comment": "Malware payload (QuasarRAT)", "value": "b9b51e29d004739a401a3628bd5b48cccb9bfa5bbc67dbacd3be197a5be32285", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860809, "uuid": "bbb66771-b980-412a-8107-b7c12eeea364", "value": "T169D4122037FC8107F1BF6A7989F221016676FA63A623D74D1D9462BD4533742A9C33", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860809, "uuid": "b3769332-8c2c-41e2-b428-27178ff73784", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860809, "uuid": "e06f3213-6427-47c5-b097-0144695711f7", "value": "12288:cPRb9qoSjkqjVnl36ud0zR/6CtQ9PUHIG8Dl8gSD+37PWY1Y1+f7LfNLi03nI4:cJ9mjkqjVnlqud+/2P+AlUDcPt1aKFLp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772860809, "uuid": "c6e74073-e3a4-4314-af74-5b980d409afe", "value": 646656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860809, "uuid": "9697fe31-9026-495d-8511-1ac88e3eb837", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cadb054-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772867166, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867166, "uuid": "49c39047-9b8e-4af0-a2fe-17bcf6584ca4", "comment": "Malware payload", "value": "e98e200684f4a4c4b28ab71f229f9e63", "object_relation": "md5", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867166, "uuid": "00b52132-7d1e-4895-8825-8c9d5a6ab860", "comment": "Malware payload", "value": "36a47272f3b70411cd1430d467454feb4413250605b62b98a23cdbd931a696b6", "object_relation": "sha256", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772867166, "uuid": "dd9a754a-9464-401b-861e-b3872dc12f39", "value": "T14871C85F4EDCD89EC807423B05718A8AFB36818D8A4DDF1FA26421945CD19473F49B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772867166, "uuid": "b6f61225-b9c8-49d0-b8d0-a5ffe9201c01", "value": "96:si+sSpkkEZw9P7FU2TwhF2BVcH0kMSOX2RzoWKMiAtTi:RkEZkFhTwh4BqrMZ2RzoWKMltO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772867166, "uuid": "211b3e6a-b695-4928-b92f-5dd4785c22f5", "value": 3536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772867166, "uuid": "29bb714e-d0da-43c0-9017-fde253428953", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dc3a58d-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772867168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867168, "uuid": "ebc8d7b1-5201-4249-91c6-d09d2a02f68e", "comment": "Malware payload", "value": "f7c99599084eb2ee56dff574d5acb64f", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867168, "uuid": "bc0b26eb-1741-4243-b2df-fbf32c556e8b", "comment": "Malware payload", "value": "6f24eb5ee228dd098a9fe277ee1ab8c716e4f10696f44301d3e9d5b878f02f5e", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772867168, "uuid": "0a029c11-a72f-4d88-a83e-17be1319b6ef", "value": "T13C6465F96076ED8AC7370E80E1043F179C299ECF667847F8B78815D1C19CA8C99E65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772867168, "uuid": "2e520dce-cdd0-4092-b996-512705005975", "value": "6144:1rKXd+mSf0sT0PepqepDDTLKtHws0Gw540HlEijWjYN2B+C:1WXd+1csRFlEijWjYN2Bb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772867168, "uuid": "5bd36488-7b3d-4eb7-9895-37c002510b1b", "value": 327046, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772867168, "uuid": "e0982635-d7bb-41f6-9acb-638e9ccf68f1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e17c01f-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772867169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867169, "uuid": "4df469cd-e7b2-4faa-afdb-338ba0a555a9", "comment": "Malware payload", "value": "7d5e097af932706cf6f7c14242275cb4", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867169, "uuid": "e853e0a0-dbc8-4087-9759-df7166065e67", "comment": "Malware payload", "value": "f9acf8a90d08f35bc3c464fe2445a051658e3eb1f0acd4ff047e553f09450e3d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772867169, "uuid": "42010aee-933f-446c-9696-515bb3012d7b", "value": "T168F2B0942384D40366CE4B53BF167DECE52BA8767AC8A847D5507BAC68BC507C2E4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772867169, "uuid": "ee28a087-ef46-4e48-8c29-10682a150073", "value": "768:CBODiGABIsZiSEOSXOrt4t9jsMNfGLOxwx7g3wm6AlmtpUyAIyqe3zY8iK:CBtryFOSXOrt4thaOG34q0x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772867169, "uuid": "4813bcd0-14d4-4f5c-948d-8400506c4e77", "value": 36028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772867169, "uuid": "c57a077d-0da4-4c3d-92ae-7bb0034a9e03", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "403005a5-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870662, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870662, "uuid": "db9ba606-ad2c-4651-8fa2-2424247fdc4c", "comment": "Malware payload (Mirai)", "value": "a1be7c65b1464958949915a59f965a93", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870662, "uuid": "0348c2f5-410d-4ae9-8afb-715ce4034b1f", "comment": "Malware payload (Mirai)", "value": "1212ccdb015645af6b3d2f8f1d23febf8a9ffb91c89f9c524898c83410394191", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870662, "uuid": "bcc67cff-9b88-4247-bf54-7d383cb21ebb", "value": "T1B5B172C812A358747DF69E637169C924B8C9B182EDC58F81D0EDF4F9598CF08B941A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870662, "uuid": "c74af43c-c94e-46fe-ae03-e8b9fc591e8a", "value": "96:2RKhEcfEnsTE11CxCCxk9BbTXfVpvHF5nPrZ:2M2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870662, "uuid": "ba1ed560-c237-4743-b879-1e637d92f88c", "value": 5173, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870662, "uuid": "044846e6-c182-426f-bf9d-4953a8338dc9", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80369f79-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870769, "uuid": "ffe6e5a8-667e-4140-8605-537e84366965", "comment": "Malware payload (Mirai)", "value": "9f6aa3aa103e17fed852ac8d5b566558", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870769, "uuid": "b1257612-d396-40b0-9448-28c82acbf6ae", "comment": "Malware payload (Mirai)", "value": "0a3ef431ef6aac9035870acc991bfa9c3b34e1be185656225c8a5016ad0a2890", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870769, "uuid": "7961f271-22be-4915-b03a-c6eb7b9b689b", "value": "T1DE333A13258085FCC40982B147BFA62BF562F4BE4234F58D6BE87E26FD5AD310A594", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870769, "uuid": "98e8839f-39f4-4120-ba89-7f1065e6edd7", "value": "768:FnjJrbghrXpCJ9t3C0q0GNls1qtjNo7MM7a0KGxDopKXobZ7/cKYeTBn:xdwG/t0XNlEqdC/7a0xxMd97cBeTBn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870769, "uuid": "41c557e0-1944-49f8-bd7d-5f3c0d3fec21", "value": 50176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870769, "uuid": "6801efc9-2e42-4fab-8acb-9a399cb9ca20", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "804df7be-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870770, "uuid": "cda54a21-738e-4c57-b711-5855f1e7813e", "comment": "Malware payload (Mirai)", "value": "09f6bfa87fe3c441494babb44d554951", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870770, "uuid": "df82efe2-a77b-430f-93cd-52a141486fc7", "comment": "Malware payload (Mirai)", "value": "a78cfdb0e92334df680191c8aedb712828434ac0c2e363abaab5363d8c5d080d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870770, "uuid": "d0087f11-fdc2-484a-8269-b8c3d270baea", "value": "T14663511E2E618FADFB6D873447B75E21F24873D212E2C640E15CE9015EA034E785FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870770, "uuid": "5ec4bfff-89a5-45a1-a210-a534496ee3dc", "value": "1536:qZSWtG1Oyu8jDZA1vDMNYdDiwZwnUwbZnL:+G1OMlAKNYdDiwZoUwbZnL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870770, "uuid": "2b4aebe7-0bcd-4130-802c-5c4b51a69cf2", "value": 68008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870770, "uuid": "74af32a5-2b61-4f33-92ec-bacfec90dcd6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "804fc6ec-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870770, "uuid": "ba0b31e9-b222-4771-939e-00b1b1cc8ccc", "comment": "Malware payload (Mirai)", "value": "ad7c708332c0341b8a3fd23482f0f8fd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870770, "uuid": "5088d29b-8634-4514-91eb-44e0d28bd495", "comment": "Malware payload (Mirai)", "value": "54b4d835ac88e17b7fd9cfaaac0b65ce7e11c3ff14f6bf0ba5ef95759e16d314", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870770, "uuid": "144990e0-3e56-4835-bf55-3842b1b7e9f1", "value": "T14933E845BD829906CAD84377FA1E42CD331173D8E2ED7226CD157F51B7CA62B0EAB0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870770, "uuid": "b23cb72a-1bf1-4de3-8662-e9b53ccfc998", "value": "1536:ZZ373CYePDBvT48TgEoxmnv44D0bwbZn:f3738PFcVEouv6bwbZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870770, "uuid": "91f131c0-f308-48de-aa2b-29aa952e0117", "value": 51624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870770, "uuid": "7c6afc23-c06b-4067-9c54-d1368b3d1fff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80579004-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870770, "uuid": "f08de762-c95e-4954-bd40-c72dc501ebf0", "comment": "Malware payload (Mirai)", "value": "1a73e59044ebba630ddddba0cf47bda0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870770, "uuid": "3f638e5b-3dda-4deb-b217-15c5047926f2", "comment": "Malware payload (Mirai)", "value": "a9e63343cdb467aaff30076d7b6ae90182a6ccfc476ca35a54974864beb4bd42", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870770, "uuid": "176b0afc-18cb-4da1-815c-3fe0d67e5d6d", "value": "T1A4F2E07821158186E827A1FB5FF50BE42FA403B39152FC8EEF05BA95990C0DCAC47E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870770, "uuid": "d721d377-5785-4d9f-83b0-f5370eadb7ff", "value": "768:9E88aVdoUANgdzUIdG0YLQeFJtsMmJ6Pv/sIJgGlzDpbuR1J2:9bRdouY6dmX3ZmJQ33VJuc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870770, "uuid": "affd917d-de83-4157-b339-eef16cf5fcd5", "value": 36804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870770, "uuid": "07ac0dd7-e954-47d0-b1ed-d27457cb1cc9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80604bfb-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870770, "uuid": "420d4db9-51ee-480e-935e-11d1d653240d", "comment": "Malware payload (Mirai)", "value": "62dac0a1b098f82828598f5cb32dc8bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870770, "uuid": "e85d70fd-f32c-4927-9b30-0ba78a2dff69", "comment": "Malware payload (Mirai)", "value": "6ff82948382469b7a4ca05e2542a8c054c4a2147d24fe1a9db8e60428348acb8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870770, "uuid": "b12fc600-4f02-4c7f-8495-56ff30edcb82", "value": "T14FE2F13402BAE5A0C276463DE591C9D3F7E637E5E17E3429F44102B69982D80B4F5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870770, "uuid": "242721ca-3e33-45c8-bb34-898f4f705c21", "value": "768:a0hH9ToVh9veHH1HjX+3EDaPEBG3bWh44CTs3UozG:a2gvenVjTD43L7+zG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870770, "uuid": "fc6fcdb0-670d-40b2-85bf-5ba89220fe12", "value": 33944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870770, "uuid": "0b382a2b-7443-4a68-bd0e-d951b762aa2d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80700b31-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870770, "uuid": "df5e3cc6-cda5-4ec8-a2ae-dc3243ae98db", "comment": "Malware payload (Mirai)", "value": "15de28136a9268fa4e1dc929dc8c4f3d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870770, "uuid": "0c3007fc-e031-429f-9cef-35cb498f53c4", "comment": "Malware payload (Mirai)", "value": "d708c1319fac539fef6e4ad61c2d9acf58427f00b63cdd00f9e1d3ee2a60e759", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870770, "uuid": "83d6ebcf-71fb-4bd7-81e3-a401355dc491", "value": "T194835B22BD7A2E27C4E4643A13F74366B1F6175F20E89A2D3D750F8EBF60580B51A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870770, "uuid": "b2a739ee-5b01-4f92-a1a3-9a4675e307d4", "value": "1536:sv2MZXFZlvOpHRFdoEH+VFrHcGC9c755Rt2aA23:S2MZ3EeVFrHcl9cV5++3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870770, "uuid": "b1120da8-7ff0-4d44-8679-da052133746d", "value": 84872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870770, "uuid": "0a0f99aa-0b4d-4310-995e-b6bf43d2ddf8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81b165f0-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870772, "uuid": "b27e73db-6d19-4e71-ba2f-71e150bb00b4", "comment": "Malware payload (Mirai)", "value": "1887e5afa306c4809b8bf23194dc9785", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870772, "uuid": "ad01a75b-df96-40fa-9727-2551b27fc707", "comment": "Malware payload (Mirai)", "value": "cb41b6234a2255ce774d1f87ad4f5332eb30102b6ba0b96f682042ab13e56aa9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "320e2583-7b14-41d1-801f-07ad189669c1", "value": "T1A0E2E01AD55B3EC0CBE17EF02FE3ECC28A348F0EB3A48A95514BAB452610D16785DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "484f985b-0c15-4cdf-a859-e6c55519fa06", "value": "768:tN5xUJuXR7TrlHtvhBJfS6lZ1g7i7IEOQXNZJR3Tjdr4uVcqgw0zL:te4hf7V1o+7Jdn5dr4u+qgw0zL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870772, "uuid": "3c965bd2-6716-4bb5-883a-238a0253c649", "value": 34028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "4ee3539d-0ea8-4dbf-901b-6040bbc0a5af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81b28f17-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870772, "uuid": "031f064d-348a-4c29-a0fe-a2e8062f6a7e", "comment": "Malware payload (Mirai)", "value": "1861b3d1d14e46fadc7147e0dd39b6fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870772, "uuid": "624baeee-c89e-467c-a2d6-d1badae31a5c", "comment": "Malware payload (Mirai)", "value": "e321c583cd63262d356c53737f2887b6b12d7dca59988df81e14a4b0ed3fa147", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "4d2cdd8d-095c-45a1-8ce3-85a098a16b0c", "value": "T1D7F2F23AE21FEDB0C4B9AE35FD3187A3254AB2D24440307305621EB167ED9DCABF91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "d48430f2-2c43-410f-8abb-3f5e61ec1cc9", "value": "768:YfjuiSV3Owm3Uah0Pc779twTc1DHWB8w4z1SQnr2Ss3Uoz0k:YbuLV3YXhuc772ADVz1Sur2PzZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870772, "uuid": "9e508118-bccf-4f61-aff1-1880de611d75", "value": 35436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "20c74b27-2236-4957-875b-8dbb07e0b7fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81b4f9ee-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870772, "uuid": "e1334936-aef6-4d54-a56b-885721101240", "comment": "Malware payload (Mirai)", "value": "a2c3a68b05dbb7bfa0c957f5abec03c0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870772, "uuid": "b3d000c4-6869-47b2-8274-8fad7c427ad6", "comment": "Malware payload (Mirai)", "value": "a5d884e2efe6e9657fc3e3edd1b2e9e625f5b66fd9096f6ec2bd66189c70e192", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "c320eed8-6855-434c-beb0-a7094f37e6c2", "value": "T19FE2E1A3D1BBC354D12E71348C9E3E4B4870EB3F0E958E6B2980542BC8B1B9D99352", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "0ce57346-87c5-4520-b2cf-1d53e3dc164b", "value": "768:5uGR9mDx1bH52akW8KVxYEzRjYYn+zZYyzP6/GnbcuyD7URQRj4:5OsrfAp9jbn+zHz9nouy8RyM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870772, "uuid": "3cc865cd-fb72-44eb-95fd-324ee6fb3118", "value": 34036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "bf29abf8-6e86-46b6-828f-1d86263de918", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81b6bdca-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870772, "uuid": "606e6d5f-9beb-4638-ad5c-b980e5a98694", "comment": "Malware payload (Mirai)", "value": "815cbb2ca19c7a8295efa0092214d24c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870772, "uuid": "c0fb7844-2263-41a9-a0c0-0aa7979f8be2", "comment": "Malware payload (Mirai)", "value": "df0d8deb96f3eaefeabe7f8589a51a4ab3fa75bee78da59d47a486ba91913e23", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "71099bd5-4edc-419d-83fb-b91c04a90c74", "value": "T1B80301259533E86ADF30183596F511836527EBFCF4AE31BFD66188EC28D239210D5E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "26b00206-cff5-40ac-8677-53dcfd105cb1", "value": "768:CsC9CK1CKkuIGGvYIVRsFBpAv1M42F7qJHkmPUear1HiLf84Z9q3UELUc:S9CUCKkcUVRssP47qJHhDaViLf84MLd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870772, "uuid": "ebab5b70-3ada-4633-a1c5-af8c625811bf", "value": 40024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "7c839e2c-f895-4459-8f9e-421238ab7d5f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81bd1055-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870772, "uuid": "efb916e7-cc58-4358-8ed9-df1a2a48cff2", "comment": "Malware payload (Mirai)", "value": "a2b18d6eed8eda38f29911937a683f88", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870772, "uuid": "babc5402-689c-4e5a-b49e-52dc06599bc3", "comment": "Malware payload (Mirai)", "value": "99a867d8e1841675d98cce8a441611b610fe2da8c092ab7d0fc0477cc0286feb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "3392f2cc-5206-437b-85b6-37ebe7736918", "value": "T12EF2E15AD394698ACDCD287C20DE67F6671953C3775D872D1B01DEC2E2B2382B40A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "6db716a2-01c9-46b6-b664-b7bd27be8811", "value": "768:0bmSI04D/wiIHcneiSuC7d+vWS2O6bgFZ4lP4pfVoSaW6:gm5QHceiTC7U+diF4P8VK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870772, "uuid": "3c527aa5-4bd1-4e79-bfa9-723e2037fd24", "value": 37512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "30719284-6576-4d1e-bccf-abd26ba5a3c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81bed40b-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870772, "uuid": "73d3410e-f34e-44b0-a7e5-abe7dcf6f659", "comment": "Malware payload (Mirai)", "value": "f38fbc45074a816f00ccd358c1b3754a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870772, "uuid": "84519db8-0a99-4bb7-bc54-6570c27f55dd", "comment": "Malware payload (Mirai)", "value": "498821bf68d7ec910c2d4ecb559a9f87d4744338414be829ba29f29787ee9039", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "9bb287ca-9c0d-4161-b5b7-9abc8c4abffe", "value": "T1AE73BF32C2A51EA0C6848938B3F5D9751773D905A19BBFFA8693C2665017EECF1083", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "e4c58f15-0a35-4287-bb4c-223a141fba85", "value": "1536:iazlQNNHFV2J2ATUftDNDKgIK9CqpoI/zCmnuog0l:ixNHvwvQv98I/zcGl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870772, "uuid": "df38959d-8386-42c3-b02b-042fc7183f6d", "value": 75104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "9f74ffac-b4b3-484e-84a6-02a507e6b3a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81c5f259-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870772, "uuid": "50cffeab-1363-4e42-a66e-fde6cd74d199", "comment": "Malware payload (Mirai)", "value": "3bcf9f7095ace24f6ca2a1926ec20922", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870772, "uuid": "baa512bb-c67f-453f-85c7-dbed0b4d4389", "comment": "Malware payload (Mirai)", "value": "27ae6791bdf69f4550fb3d8a4109e24b78d9cd66c0531c4e4f5a26e666fd650d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "f04f8c50-3f5c-429a-ae2d-36830a96129c", "value": "T158834C89B800DDBDF44BD6FA42230919B931A2514FA30F27B767FD9B7CB20A49D1AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "a478569b-4b79-44f4-9ac2-bdac4f2d7fe2", "value": "1536:R14u6b7zZgqCo5kqYZUrbhL0WnA5T+f/u0IG8SFQd89qgwQnRbxFHG/CA0DeNnxG:RP6b7zZTkq3A5SRnFQp8xVG62h2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870772, "uuid": "2606ebff-e3bd-4f57-8aa1-7157d7e783e4", "value": 86776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870772, "uuid": "92a23831-cd36-4ccb-9cc9-64b323fa31e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87150698-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870781, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870781, "uuid": "06e426d7-404a-4f36-a1a8-7383d1da3b2a", "comment": "Malware payload (Mirai)", "value": "69bcf3d8066af65a52efec8dd9503003", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870781, "uuid": "0ebc7aeb-62e5-4f0c-bb44-3454c5a14741", "comment": "Malware payload (Mirai)", "value": "7642e5a3babf161d0f6888ad411612026c29d808c2aca6baa36f060faecf1410", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870781, "uuid": "cb21b897-a3ca-43e6-919c-3eeed1fcaf7f", "value": "T16873074AF9829F10D4D913BBFE0E018D33536798E3EE71129E116F11A7CAA5B0B7B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870781, "uuid": "cd230a9b-d47d-4f05-9f51-76122f58aa74", "value": "1536:K9nq3zwiiI5npnFUNh0n2eooZnknrw6iYhf8XllzfisgAXU5wbZn:5jwFI5pWNh0Wo2nrw6iYhMVgAE5wbZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870781, "uuid": "cd9ca605-cf61-4188-a290-cb1c30148a62", "value": 75616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870781, "uuid": "85a27d60-fb90-43c9-8014-1f8e81daeec5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "879ad0c1-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870782, "uuid": "67a8a037-99f0-41cf-be3e-3c16c254bc32", "comment": "Malware payload (Mirai)", "value": "45ff3e56ade1978031b1d9d4db7cc11e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870782, "uuid": "6f5c26f5-d419-432f-9cc8-ae9beca531c0", "comment": "Malware payload (Mirai)", "value": "a26b82e4ec97c3829755a9332cbe1d9ac362db6b29faf6e06c9460a84b5df341", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870782, "uuid": "412e81cb-8a1a-4365-8ed7-22eb4cf489dd", "value": "T19653E846B9829E11C5C8077BFE1E118D33137798D3DEB222DE116F21BBCA56B0A7B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870782, "uuid": "a2a7a09a-941a-45e7-9d1a-12492a51b0cc", "value": "1536:wRn78zEyaRDCvEsDCbscC6xIrqrrYmPOIRiM/3qFsIwbZnE:aSEJDCv7Ssc4rs/3qFsIwbZnE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870782, "uuid": "04a46ba2-f264-489a-a7d0-454ccf053020", "value": 62640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870782, "uuid": "69f7883c-09f7-478b-9beb-b0d27d704a5d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87a35e66-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870782, "uuid": "eb89c857-9461-45d5-a317-dc609c0bb3f7", "comment": "Malware payload (Mirai)", "value": "5ecbf8d74ea966ccdbebc6cc0d168157", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870782, "uuid": "65a902a4-9c02-4467-98cc-e202841c22e3", "comment": "Malware payload (Mirai)", "value": "d31c42e894e82fd56bffc9911156bfdfdcdd341493d2432ddf49ad4360dfcb08", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870782, "uuid": "3baf180b-da1e-47f3-a05b-83c1e08a4e40", "value": "T1E7A2C0316B42BEB0CA752A76CE3581C30F431B7C95BE70931925C5A87F92503CAE87", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870782, "uuid": "438ea7e8-8aef-419b-b9f7-af036c0158fa", "value": "384:jwBENYpq3OPdU93aDFewBGGGOOb5r23MFph7qmdGUEpiah0:jwBiYo3OlK3MFewoGGOOp/9q3UELS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870782, "uuid": "fb0c80ef-7c02-46ed-a0e1-3d05fbe9b3b0", "value": 22196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870782, "uuid": "3b1ee57e-d89d-4641-bc9f-2593ed0cd5f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a129e2c-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870786, "uuid": "3f31f84a-2cfe-442c-9428-331205d20e65", "comment": "Malware payload (Mirai)", "value": "3b21de7f912cd4826b99458e28649126", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870786, "uuid": "50a7aed1-ad88-4f57-9ad2-465d634548ff", "comment": "Malware payload (Mirai)", "value": "fd6e9f5e263af5b73dc576e9fb3dd6a930f2a3003527414c3d3b829135a12e5c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870786, "uuid": "7fd1fb48-d979-480a-9015-954c6afa9d20", "value": "T15D63410ABF611EF7F86FCD3706E52B49308C641A21A83F757974E918FA4A10B54E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870786, "uuid": "c0cbfb30-c2c9-447d-943a-aefb808a471b", "value": "1536:nxo6M86eAtqVUlf2VNufYuI0Kck6n2MFiwbZn:K6MjeAt8U92hulKV6nkwbZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870786, "uuid": "8c3dc918-57e2-4cbc-b090-eca1b8a39358", "value": 71480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870786, "uuid": "5c6c7263-edd4-44a3-b12b-54a356512ee5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a144ddf-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870786, "uuid": "57d1dd64-5818-423c-a317-530e75a18dac", "comment": "Malware payload (Mirai)", "value": "e38892b7d69aa21ac4ef23bcdbdacd39", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870786, "uuid": "f5daecb6-3968-4ced-8b44-492d21726ea8", "comment": "Malware payload (Mirai)", "value": "1b90de1f1a53b171162753147f2e0ab3aa357cb1b27b1d2e58cb72cb095886cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870786, "uuid": "fa220ab1-9960-4f97-b277-d45cb42b02e4", "value": "T1EB33E845BD829906CAD84377FA1E42CD331173D8E2ED7226CD157F51B7CA62B0EAB0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870786, "uuid": "2af762f6-93a6-440e-9615-e834d1257ba9", "value": "1536:jZ373CYePDBvT48TgEoxmnv44D0bwbZn:V3738PFcVEouv6bwbZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870786, "uuid": "189b3c8f-77f3-42e6-b297-66e39266a507", "value": 51624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870786, "uuid": "45da62db-7cf2-4214-8139-ae6432a44a07", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a21ed88-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772870786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870786, "uuid": "6ea7b271-fb88-4502-a55e-8c9f7cbbd890", "comment": "Malware payload (Mirai)", "value": "4f19624e3b3315288eb2e10b20a63a4c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870786, "uuid": "01305378-40f8-463c-be11-c27a010aff25", "comment": "Malware payload (Mirai)", "value": "f9c8f3dc44c95dee83c9d8148ab62c0641869797097133102e5e36a437026813", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870786, "uuid": "d8a42900-f598-4b37-898e-dcfec25bd091", "value": "T134F2F1838773F07DCD91E8F2481F8384EF79246EA717569F09DA946DE8B39022A713", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870786, "uuid": "a738779a-3103-4e83-a577-3664d36914b5", "value": "768:f5Ua6AjXXqUUkmUxcrZn6VjbH6pP0/EfGI82pfx0i6:Ljjn/0cfHiAeGX25h6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772870786, "uuid": "0da33be2-2325-4ac5-9310-7b41f2fea693", "value": 36152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870786, "uuid": "8c460b27-4c4e-4b51-a137-90db2d9ecd2b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db2b0f17-1a01-11f1-8a4c-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1772873069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772873069, "uuid": "8fbd7812-2f93-4d98-ba5b-a1c34023c511", "comment": "Malware payload (ACRStealer)", "value": "49fb7a987544a4a99c743d22a46c78e7", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772873069, "uuid": "337e8077-424b-4ed5-8c34-6dff0d45defe", "comment": "Malware payload (ACRStealer)", "value": "4df58b7e964f595fbdd1a345ea8a42d7477a473527174eb07aba7a236369933b", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772873069, "uuid": "8d150508-2e7d-4d6e-90aa-ed25152d0952", "value": "T143859E1E72E907B3E5AA8139454B564FE77170280B20CACF43908E7E9E27BD13939F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772873069, "uuid": "3874a336-e8d7-4b3a-a7c2-f0efa71f5995", "value": "cead280c29db54dab7e26816f98157b4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772873069, "uuid": "e802d490-c31c-40f9-b1cb-d2b3273ca4d2", "value": "49152:ucBZxrT3rfB3+zN1iULaQZCV3DUXRBeKLYq:uOxFOiVGX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772873069, "uuid": "a44a3f8a-a9e3-4cbe-a51b-b3bb7edd66bd", "value": 1720320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772873069, "uuid": "8dedbfb0-a18c-4e6e-80f7-2e4c7cf4c96a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbbc4c7e-1a03-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772873876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772873876, "uuid": "b0c24478-808a-4c25-a1f1-e895a32076e6", "comment": "Malware payload (Gafgyt)", "value": "2f6013b2889f66b319b45aa3ed4879e4", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772873876, "uuid": "fe3168b7-610a-43b4-ac43-b7af4e35a1d6", "comment": "Malware payload (Gafgyt)", "value": "5fa09e32f55c66f298eb174ddb1b453e2b42338aae9c8b45f63f125e767bcfbc", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772873876, "uuid": "7b97912f-9dc6-4a6b-a879-b6e9e5cf4c11", "value": "T101F35B1BB4C180FDC8D5C2B44FEEB226DA72F45D2238B25B27947E262E4EE205F5D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772873876, "uuid": "b4902c19-83b0-4c3b-b3a1-f675434e648f", "value": "3072:Iimwf+8dIZqvctr3hq48KiMz80i9QSMDJGrsLhfp:Il8StVj/iLm7Zp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772873876, "uuid": "3e046be3-ae0f-4a3a-9c70-e739c8b01be3", "value": 169928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772873876, "uuid": "9746ad6a-a822-455d-beef-bcb645a4d5a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6eac788c-1a06-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772875035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772875035, "uuid": "7bf53c21-0a9c-4f7a-b0d7-e1b5f6c72dc4", "comment": "Malware payload", "value": "3b6c11c16f597d23968676ae27979f3b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772875035, "uuid": "32d761fa-3e55-4cd5-a0dd-12fd33212cf1", "comment": "Malware payload", "value": "033a00b9ea36b7dbf6f026540ec2c278839488863ceaf0b2c5b61a92d7e0b41d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772875035, "uuid": "7845dc22-5355-4570-b2bf-9dbb23c50f1d", "value": "T148973304037F07A0F5AC9B0E5222B68F25E9C6045CDF366DC9F7B6A563C2678A4493", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772875035, "uuid": "0dc080a9-9037-490e-8d6e-6c549c846dda", "value": "786432:u4zGQFNrvqoN2Zwq8YGwTszP6FwgmHyFzRSOBVAtoh54cgbrmJn4IM6G:u4zGQFN2o4OqdGBQwgmuBKoh5xgbrm6r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772875035, "uuid": "41b313b6-635c-4cfb-9fd6-c9c36727b3b6", "value": 39981523, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772875035, "uuid": "37d84dd4-8eb0-4158-9a4f-fe926a068922", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4352b26-1a07-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772875581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772875581, "uuid": "a36c0e1c-8954-4c5a-8a37-e5b2fcbcf5c6", "comment": "Malware payload (Mirai)", "value": "e9e2a62b32a40651ddbbe6d28ee50238", "object_relation": "md5", "Tag": [ { "name": "aisuru", "colour": "#af35c8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772875581, "uuid": "31ba89ca-8a0f-45d3-a399-9012f5b86746", "comment": "Malware payload (Mirai)", "value": "62c30f8b5a6b4f631d8029dfe8f14b8bf063b43d06ddcd4d33786dfdaac191b9", "object_relation": "sha256", "Tag": [ { "name": "aisuru", "colour": "#af35c8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772875581, "uuid": "44477596-7fc5-4bbe-867b-2a838ca8363e", "value": "T14CC31859FD819B11D5D626BEFE4E528D33131B6CE3EE7212DE145B2027CAA5B0E7B0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772875581, "uuid": "f1732599-5bf0-40d9-bf04-88308d0c0ef7", "value": "3072:96JtuG9chKpONhEYVsXc/aYbLxG5awIsoJ/0YdV9TT/UjduK:AJtux0ONhEYVsxY/c5awIsoJ/0YV9HUN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772875581, "uuid": "479a5f1f-14f3-488d-a720-6a07a4c47e2e", "value": 126076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772875581, "uuid": "addfd9fc-d6b1-4373-9739-d8c3dee0cff7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e2c6a9d-1a0d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Neshta)", "timestamp": 1772877879, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772877879, "uuid": "525c9bba-9d47-4148-b83c-3483bbc181b4", "comment": "Malware payload (Neshta)", "value": "8e4acf08d697bb0f4962bbafd2c35bad", "object_relation": "md5", "Tag": [ { "name": "10pluspositivesinVT", "colour": "#8e4bd5", "exportable": true, "hide_tag": false }, { "name": "Neshta", "colour": "#8e9cff", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772877879, "uuid": "443add41-11ea-491f-b5b8-a368009362af", "comment": "Malware payload (Neshta)", "value": "5db7ce2823c4dd1706be5caa7eb06e1d10c2ce1d9f3b02afcf199f509d4f5502", "object_relation": "sha256", "Tag": [ { "name": "10pluspositivesinVT", "colour": "#8e4bd5", "exportable": true, "hide_tag": false }, { "name": "Neshta", "colour": "#8e9cff", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772877879, "uuid": "75382c34-7604-4940-84dd-686046ce6a0d", "value": "T166445D13E1D244F8D46EC5788A9ED272FA32BC641538BA2A9FD4D7216F72F505E2C3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772877879, "uuid": "f8edf657-6b7b-42e6-852e-6c7e2d1b6085", "value": "9f4693fc0c511135129493f2161d1e86", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772877879, "uuid": "20532e78-23b1-426f-b8ef-27217f572ee6", "value": "6144:k98fu4KLkRXXhXUZYId1H5p4CvYOmhE24VQ:5u4+kRHRUC7CvtmhJsQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772877879, "uuid": "ebe671e3-3843-401f-937e-680d5f4adb40", "value": 268288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772877879, "uuid": "d9f4dc51-7859-40a7-9b00-aaa2ad6af7b8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e155425-ed79-11f0-8990-82aee05be84a", "comment": "Malware payload (BRAT)", "timestamp": 1772885952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772885952, "uuid": "135d13fe-99b1-4db2-b5a2-901c30d4cc6a", "comment": "Malware payload (BRAT)", "value": "423cf5ddbe13df64594385b8fd519cc7", "object_relation": "md5", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772885952, "uuid": "15a19ac6-30cf-4a35-86fe-749eaf533d08", "comment": "Malware payload (BRAT)", "value": "165c77e0cb3fc6551babc2de99e0c5182fb86e20ac3354da7ae980b580721049", "object_relation": "sha256", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772885952, "uuid": "5399eab9-7c14-47b6-a755-cc498c0bb7af", "value": "T157867C43EC9159E9C1A9A33089A79253BB71BC481B3223D72B90F7392F76BD06E753", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772885952, "uuid": "8781e414-0b8a-4a67-aa90-0e4218b79d53", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772885952, "uuid": "0ef1c4b3-83d7-4d13-9daf-968be67f85e4", "value": "98304:G3T2h9PPeJzgg3ty1qOMGUjEBoSMeduU8gsHZVY/YK2:GjigJMg3E1qrQFM/U8gsHCYX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772885952, "uuid": "c98b320f-68d1-4280-97a7-6354d28b6c21", "value": 8346112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772885952, "uuid": "157eba1f-452e-4d82-b3c0-5dfa28c87271", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4daad76-1a24-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772888038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772888038, "uuid": "d52b29dc-7479-4600-b2b8-d593e3bc0f88", "comment": "Malware payload", "value": "b59fe101b411f26cc798cf26ad443adf", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772888038, "uuid": "8fa72b7f-f713-418f-8b39-2b9434f0baf4", "comment": "Malware payload", "value": "aedf5862b2a8c32611846c286b9ca0e3fa11a153dc194a87c8598f94fe2257de", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772888038, "uuid": "4a5bbc4d-1311-45ae-8489-c8708a12e4b2", "value": "T1A742DA35B809EE1EDD279E5DA17AAF3D40DCC67BC625896CB2DCCA540742CB94B42D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772888038, "uuid": "e796d848-27c6-48aa-ade0-0460036eea11", "value": "192:S8EeBIUOAMnvpZZIPFl8nxhnQjnshcCgnqzcpmDUgxD2:S8E2JOAsv29axhgshekd2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772888038, "uuid": "11a685f4-43f1-48b6-a8f5-0549307c3bfb", "value": 13102, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772888038, "uuid": "cf62037d-c83f-4550-8e77-c6de04ab13eb", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a0a6c91-1a2a-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772890570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772890570, "uuid": "a8ec7241-d2c3-4e08-9fef-6513fbe01d45", "comment": "Malware payload", "value": "a08c51648455f3f8bf7c7e8de80fb797", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772890570, "uuid": "23ff019d-b8f3-4e0c-9396-7766dec55565", "comment": "Malware payload", "value": "5f5051818d3591477be1a32479cbd3d4eda70f1b0654daae2003492034e476cc", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772890570, "uuid": "e581160e-69e7-49ae-ae9c-e4948786bc75", "value": "T197C4239603689664787407B197BF9F8DC6028E1329921BFD9FC8BF0CA1356489D5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772890570, "uuid": "1f6651ea-06fa-4d5a-9295-e393b1efcfa6", "value": "12288:wOCBcIqBQliubzqtYBpfsz4TKPozt4CTo4Pl/2Ar5L:wZ+nubzqyB9sz4TKPE1l/Zr9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772890570, "uuid": "c9d2c64b-4bc5-495b-9b73-2f33960cd48a", "value": 546982, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772890570, "uuid": "2ed7ad15-1a8c-49f8-ba37-ab19fdafc8e6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0130dd1-1a2a-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772890687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772890687, "uuid": "04d957c7-2f56-4025-8c9e-f87c9a0b3b14", "comment": "Malware payload", "value": "16694c445ca74feb492e63a184906c52", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772890687, "uuid": "d8c88692-a9bb-448d-a7d4-1d8ae8e601b8", "comment": "Malware payload", "value": "cb1195ffe1bd3109e3801af6526ddf3a7fe32bbba863068717c96dee30abccdb", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772890687, "uuid": "743ef2e5-e343-4df3-9c05-5644250e468f", "value": "T123C4239603689664787407B197BF9F8DC6028E1329921BFD9FC8BF0CA1356489D5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772890687, "uuid": "4ba39cbd-6fba-432b-8617-94e35d1be056", "value": "12288:UOCBcIqBWliubzqtYBpfsz4TKPozt4CTo4Pl/2Ar5Z:UZ+lubzqyB9sz4TKPE1l/ZrP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772890687, "uuid": "ae9a17e3-6548-4c86-a446-08da407f2ada", "value": 546982, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772890687, "uuid": "ab3f3abf-0345-45f3-933e-399c7c592a18", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77c62460-1237-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772891409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772891409, "uuid": "63ce4a9b-f939-4dd2-ae71-623a12e6400a", "comment": "Malware payload", "value": "f83ef3ad39fbf1fa323dd58ad37319be", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772891409, "uuid": "01ecf902-032d-45a9-9a4a-9801e6e27fe5", "comment": "Malware payload", "value": "37fd4a6375041fd2f6b36dd5b8379ba632bf8a469336a8c6d3ddf950fc6250cf", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772891409, "uuid": "0faf8ed2-27fb-4f4e-a43b-d35c8a55ec8a", "value": "T176C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772891409, "uuid": "4127ae04-103b-4502-a168-0bd7a346e39f", "value": "12288:wyBXIs7rM1ocqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5g:NImQ1gEA/f0Za6TCXKBxeW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772891409, "uuid": "c907cc55-f49f-4e9d-a17c-b5570e3dc1e7", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772891409, "uuid": "8eff68bf-197d-416e-bbf2-b16502b428ca", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f363ab21-1a2d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1772892008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772892008, "uuid": "ab57852b-ae2f-4340-895f-52204934f1eb", "comment": "Malware payload (Vidar)", "value": "3544057ad6e754caddbdcf73d4b323ef", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772892008, "uuid": "15dac46d-977a-4714-854f-6dfbc5224456", "comment": "Malware payload (Vidar)", "value": "f22b213447db1a67818bfe353b6c31cdeb9b2e5e9ceb0dae1908c42499fe9873", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772892008, "uuid": "54e9feb9-bd40-4483-8165-012393410b7a", "value": "T1022422D1A095ED6DFD14F133F2CCADB659B149300EB1E7D1683B1C69AABC231438A2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772892008, "uuid": "5f4a2ef7-65c5-4283-bead-3fdadb3a0866", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772892008, "uuid": "ef6ff44d-08e3-456b-ac17-93ebb32ae85e", "value": "6144:EnXKZj6BpzfjQ8bNZoqcZy09xGWZ0bY+m:4KYp/Q8b/ovyZWib6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772892008, "uuid": "fd67a8b5-8d9c-4723-83a7-ba2b5804581f", "value": 215552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772892008, "uuid": "843cdf5b-a642-48ae-af9d-e346ffb7f879", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1934a4c0-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772892085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772892085, "uuid": "aec95b89-0882-40b6-960c-b34cee98d069", "comment": "Malware payload", "value": "1ff5a92a793b1503e1399bf2434ac5c8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772892085, "uuid": "edf17c6e-ab36-48f2-ad4d-33b4b524a378", "comment": "Malware payload", "value": "22eb75dfc037517fc0f62570c77379a708a8769fe654bb7c58177ecb17f3c2ee", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772892085, "uuid": "b23759b7-03e3-4c7a-8c63-a2c6e9e5f4b0", "value": "2213028237A53F72D52188F4D7BCEFCA614A7D94AFA9181BAC123698747135C28C981F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772892085, "uuid": "c558043f-2aaa-4d07-9613-e8a62b22ca6f", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsD9:yYI0ARqw1qAEW67UIWi7M8gmf9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772892085, "uuid": "d22b2f29-c402-4782-981a-9c16bd4382f6", "value": 44888, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772892257, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772892257, "uuid": "52be71c5-b379-4ee0-b841-20140264a698", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772892257, "uuid": "437b5b49-63d2-4bef-a99b-682363ecfd5b", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772892257, "uuid": "5c57a597-51d2-4231-b0f2-0e309d0ae329", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772892257, "uuid": "fb4a23db-001e-4331-ae11-74949e6109dd", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772892257, "uuid": "313bd186-0181-4267-a118-a6f8623c4f91", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17f1ef07-1a30-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772892928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772892928, "uuid": "e601a593-3573-4c4e-bd6c-37d299a99b0e", "comment": "Malware payload (Mirai)", "value": "42fcedfdc2fa74022e390ff86e5807a6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772892928, "uuid": "71d53afe-8b02-4b21-ade6-3973ffe85eb9", "comment": "Malware payload (Mirai)", "value": "fe3ce9e4452ff33772b0f28e1ac4ac40fdea0398d7b5fbf1858509bdbab04f91", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772892928, "uuid": "dd84963a-1afb-461d-b9dd-bdb6e078ef0f", "value": "T1ACB33A4AF9819B12D5C922BEFA1E518D336357B8D3EE3202DD149F2437CA96B0E775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772892928, "uuid": "cc726b3f-fecf-4ea4-9387-91a585222283", "value": "3072:KdflLA8MderOmX1JngaoOnHTLLqdkj4dwUtXFJEq:KzMdiOml1gaoOnHTLakQtH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772892928, "uuid": "e4a7c52d-3f86-4d5f-8748-90f704ada5b0", "value": 108044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772892928, "uuid": "3d52a14b-c0ee-4298-a6ed-2d1f83b87f22", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa2bf4d1-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772893497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893497, "uuid": "a87540b6-3b24-48d6-be48-8d023a2fdb58", "comment": "Malware payload", "value": "6503654d388e9fb966b7fbe274319123", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hjamie", "colour": "#0c8ce8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893497, "uuid": "7dedd355-3e53-410e-8c32-3bad18d68514", "comment": "Malware payload", "value": "ba945f6fb0583aebf7af894164bfaecc41e3a66046168bc0a82adb0ccdf7f9ef", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hjamie", "colour": "#0c8ce8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893497, "uuid": "8c4052e5-5846-46e2-a857-f22d4cef3cb4", "value": "B65302C7996A8739F8B5C9BC4EAAC8445C57022D7147B0FF454CA5BC28397811E9AF0F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893497, "uuid": "610c8447-778d-4a2e-9d40-d8a46915586f", "value": "1536:m3LqE6rUQWzVQR7iAGEcUT5PIi7pLqBNs4LOjcwf4nB6XX:mOE6PWo1T5bz4LVMXX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772893497, "uuid": "969bd4fc-6235-4def-b936-5328b0c71a1a", "value": 60816, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c499f2ff-1a31-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772893647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893647, "uuid": "091b7b53-0f13-4b32-ae0f-2b354da0bb3a", "comment": "Malware payload", "value": "9e9eee2fe995df4f11f0a7c15879e962", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893647, "uuid": "a0a8cff1-83c0-4923-b9f3-dfd95373484f", "comment": "Malware payload", "value": "11fbd41881c27598d785cdaee1ba345377c44e986d629a3777032b7a25bfa9f3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893647, "uuid": "cdd4e1ff-4d45-4a9b-863c-430625266e10", "value": "T1578308327589582A210B028FD263336C70FFD8E2D611E5B6F6F922344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893647, "uuid": "d4a8a81a-9121-4ffe-b494-2d6ec34b8187", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnmWaYVN/:XEKltp9t2SX/yr2pbmW1VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772893647, "uuid": "dca7744f-a9f9-404c-9148-19cf36e5b3da", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893647, "uuid": "f0485ecb-cf27-4a63-a6bf-1495ef04950d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efa724ad-140f-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772893747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893747, "uuid": "b5272060-e32c-442e-95f4-05f12400a951", "comment": "Malware payload", "value": "2069f6d4bc6bc2552ef29badb098bf3d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893747, "uuid": "f07cb7ff-01e7-43e0-a0a2-5a91f848b5c0", "comment": "Malware payload", "value": "ea2e81b5ad1318e5dd8c121e71827b4261120ef7231c3a4c8b9b81b610ae2747", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893747, "uuid": "4404bbf1-c71b-4006-b9d1-da0904b5a0b1", "value": "T1F2C4235D7018EB38E907A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893747, "uuid": "73e90275-6cff-4f59-839b-4fbebc7af58e", "value": "12288:FMU+0xq75aS9iYIp6cP/G2Bku8RtNvC28c5/VTUPkYy+:R+J71vI/GHYc5/pe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772893747, "uuid": "07fd1ee9-f24c-4303-8e65-54caf1b60736", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893747, "uuid": "0e29c483-8560-4b24-aac8-8a0c5e869b63", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "495ba8f2-1a32-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772893870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893870, "uuid": "2cf5720f-6b56-437e-93e1-a676769ee021", "comment": "Malware payload", "value": "cae4625304555cd70c7334ca48498d6f", "object_relation": "md5", "Tag": [ { "name": "pw-azuro", "colour": "#8789c7", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893870, "uuid": "9eb658e5-940d-4643-b8d1-8d9e53c47fce", "comment": "Malware payload", "value": "bcf25ce8d6dcaa7ef977cc428d3c356ac4c1751b896a2d103358b56c54ba2d9a", "object_relation": "sha256", "Tag": [ { "name": "pw-azuro", "colour": "#8789c7", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893870, "uuid": "aad0128b-4669-430b-87e7-8c4d41c19b3e", "value": "T13337332EFC3CE8196CD8E67807BEB9C3DC5404228D6975065FC206E5B6A3C5CE19C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893870, "uuid": "ce76f5f8-2f39-4a7b-8e3c-df4d8a74b5f5", "value": "393216:V1cG1A5qu+r5HusNZ6xA/dSOkXa15L0xL5jKvoUeuQtIzXLGnILaK6OtI/c6:V+n5F+r5Ody/dSOAabq1jeleuQ2zXb7K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772893870, "uuid": "6e5f4f57-403c-4fb5-b2c7-80eeea09733f", "value": 23998299, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893870, "uuid": "c8ab33e1-31e3-42ad-8a83-cd60b1eeea30", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14814aa8-142f-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772893986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893986, "uuid": "2bb72da9-af75-4d0e-bc5d-262ce4268009", "comment": "Malware payload", "value": "874faab6a512ba54d9b574b161e41e63", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893986, "uuid": "ea2ae852-138e-4cf7-aa8b-d8f1e8689304", "comment": "Malware payload", "value": "b44d8b264cfb97a92d0333973d352382da6c26324cc377f874accd81ef0a7e5d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893986, "uuid": "0e905c23-9631-450b-9ea8-8dd6eed1fc4f", "value": "T192C4236D7018EB38E507A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893986, "uuid": "c91b853b-6551-400f-a3f3-8f10819f46c6", "value": "12288:FMU+0xq75aS9iYIp6cP/G2Bku8+tNvC28c5/VTUPkYyH:R+J71vI/GgYc5/pn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772893986, "uuid": "e9e7d2ff-94ec-4768-8ca8-95acd49fbb9e", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893986, "uuid": "afffe52c-7fae-429d-9abe-ead2c23e08cd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ace83b5d-1a32-11f1-8a4c-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1772894037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772894037, "uuid": "8138bc7a-992b-4e2f-8b63-fd27723f60be", "comment": "Malware payload (CoinMiner)", "value": "143cea5c612043f114f3e2c1393ee323", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "sosokenota", "colour": "#504c6f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772894037, "uuid": "a4f92525-5e5e-43bf-bb4f-4b61cc7a53eb", "comment": "Malware payload (CoinMiner)", "value": "3f7a393f356e91d93ee0de99b601a68812036eb76d2d0e4640ce308647dde0a0", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "sosokenota", "colour": "#504c6f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772894037, "uuid": "c72b70ab-131a-49ab-bd90-82ef3f870c57", "value": "T1F5363316BBCB66F5F76139B4048223E10AF8EF206738A1E70E902B195C7A7DA59740", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772894037, "uuid": "4778c99e-1a01-4226-9441-31cfd4167a84", "value": "f6baa5eaa8231d4fe8e922a2e6d240ea", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772894037, "uuid": "c9a6ba62-0085-4675-95c7-93826a88a628", "value": "98304:dZ582ZeDzGM4nypXZ5ie4FJYLu7a5Rj1hCtzw4BzU8g+VZES:dZrI64pXZsku7aOtzjBg36ES", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772894037, "uuid": "2f9a5c3a-8659-4335-8b75-eb6fa69517ac", "value": 4897944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772894037, "uuid": "2818a872-e2e2-4598-bace-16a359c7015c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8916e9b6-1a33-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772894407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772894407, "uuid": "1ab7aa34-51ec-4a05-ac13-fda5b0fb14e9", "comment": "Malware payload", "value": "09bb12fd1529c7ec7745e882f2a396e5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772894407, "uuid": "ae393be8-b076-40e5-9772-4edf2642f4bd", "comment": "Malware payload", "value": "28cdc9ff4fdb0b53d0d3aab1a53c39a3662de9a41f56f4e21f831263fcf5b790", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772894407, "uuid": "c617d43e-599d-488c-a6d2-9a244ddf6c8b", "value": "T124B42369227F71900C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772894407, "uuid": "2145026f-48ab-4afd-a3f7-419d94de2ff8", "value": "12288:A7JZAaFpezqO3g/ALyYG0ZaDajTCXMO8xzDOe3Wc:cLpeHA/f0Za6TCXKBxmc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772894407, "uuid": "3e604f66-9b1a-44f5-9bae-573bef7f3255", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772894407, "uuid": "9a3c7085-3edd-4879-904c-5dc2245e3b56", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18238862-1a34-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772894647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772894647, "uuid": "aaedba13-cf39-4628-a191-a56c72c2655c", "comment": "Malware payload", "value": "19af9e10ebe2238a6e6c5e138f0f203b", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772894647, "uuid": "915b2f87-9834-4904-8c00-9dbaac55bb61", "comment": "Malware payload", "value": "adf44f0e1af4d174c3de91b6083c34de8b783119a605554bc3ffc12445541b01", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772894647, "uuid": "b11f260e-a9f6-41ea-ab8c-86ea2d9b25cb", "value": "T1DAC423B7179AB4897503E3E4814C6D9489AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772894647, "uuid": "9c842a3e-19ac-4c8d-9e61-801e3e29767e", "value": "12288:ceElNtIBB2gX3U5pA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezU:ceSIBBfHHm6Jj6ESfUxZ91kmY/9He4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772894647, "uuid": "5d95d318-fae3-4e79-a2fd-9959101cb456", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772894647, "uuid": "8fa3ce43-c3be-4bb3-ab21-cfcd69afe64b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec4ef444-1a35-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772895432, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772895432, "uuid": "edd946ee-2f0b-4601-8c25-ed13303f2d5f", "comment": "Malware payload", "value": "9c561af958403c6d4ea0f82e3c32a40b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772895432, "uuid": "06f3775b-68da-4060-8395-16d5004dd1b5", "comment": "Malware payload", "value": "363f4174fb6fe9b985dc3c506ca7da7236c916afc91575b99a14de0e4af1de7a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772895432, "uuid": "2f840fe4-286c-47fb-aad0-62f6dd3a2cd3", "value": "T10893093274AF052A166F436E80427B1CEBA982DBC601DBE8F4FD51595FF4D8932672", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772895432, "uuid": "0cab5045-4fea-48cc-98eb-b4bf4b0610db", "value": "1536:pXyp1xQ/uwMmAIa14oXs/I8epeV7tb73WAxCJCStkb5fvnw05S4jrmixPsCZKr6i:pisIbzEStkbFvnw05S4jrTPsCZI6Y/7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772895432, "uuid": "adbc2606-3a51-43da-ac87-3ebd0d8f747a", "value": 96308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772895432, "uuid": "8eda80ab-81da-49a7-8c5c-daffa466e5f8", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "002d4078-1a37-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772895895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772895895, "uuid": "21b43f86-8c75-41cc-84b6-5484225b7e40", "comment": "Malware payload", "value": "7d84a65ed67ce5653d733026b76bff12", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772895895, "uuid": "10dce0e4-0ef8-4587-b36b-8d177aed0ebc", "comment": "Malware payload", "value": "2893e4dbd2289ed2cf328bd358af4d2d3f39bcd956b53ca6a8021506da4589a3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772895895, "uuid": "00d35a3e-7a63-4867-841d-004037ea781d", "value": "T1FE34E0EF1F86E3C9827B5E73F19D35C4BE7892AC2DB87484164358076EC631D21A48", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772895895, "uuid": "71f7f290-3836-4a06-91b2-6ab2692fe493", "value": "6144:g1tk1CBPa0MjIw/vPEYmZkGHws8X9qgDD0a2DwZpaR:n1CBPQdGR8cgDD0qw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772895895, "uuid": "f44ad765-901b-4ea6-ba70-31b34a102365", "value": 247889, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772895895, "uuid": "bc2eaaae-64b0-4295-b4e4-92b6ac8dcc6f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a2543ca-1a37-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Fuery)", "timestamp": 1772896073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772896073, "uuid": "aaa57f5c-d2e2-4806-9252-d6c526ea4d1e", "comment": "Malware payload (Fuery)", "value": "e21181cb7bd7735b7c2dce3fdd533098", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772896073, "uuid": "3a844bb1-ca61-4bfc-b256-00d40d9475a3", "comment": "Malware payload (Fuery)", "value": "c32e3e9204f8a8f77376f5800785b95f3a6a5521b205b759376dc7eb4664dd64", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Fuery", "colour": "#fb3e08", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772896073, "uuid": "88ce757d-4a0c-4d67-85c1-55fc07b81a56", "value": "T1E0853905FEC744F6E8071A3259AB22AF2334AD092F369BC7DA447A79F9772D50C263", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772896073, "uuid": "6d521afd-fe8e-41d0-92ac-cf2c787ef722", "value": "5af915f278815e76bad476ef32593028", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772896073, "uuid": "7f1b4380-e968-4960-a31a-11a0b01e29ee", "value": "24576:eleDr7Usw0eegUkfMvzeHKJO2ygRVEsSSjiYI+iNJT+Ek1bVL2fj/SzR:eleAP0oUGcdf9jdViNB+Ek1Yf7q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772896073, "uuid": "9af5a4e5-34f1-4f08-9f0c-cf7454f93077", "value": 1794560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772896073, "uuid": "70ae9c03-de30-4943-816b-831f3c10354e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "448cd536-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772896636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772896636, "uuid": "7bb19da4-1f79-4cc8-a430-56e7fb7cff14", "comment": "Malware payload", "value": "a942530b3fc2213ad0de0731fe417f2e", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772896636, "uuid": "703413c7-8a8a-4515-ac90-980d1a47385f", "comment": "Malware payload", "value": "a6ffc5f875944f63ee69dcf49460d2b7392ce9214c3c5f7a3b34a80ed1ac6680", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772896636, "uuid": "3a51af4d-dfd8-4ed2-8a84-3cd40bc3d93c", "value": "0B73121613A925A152314AF1E7FE6F88F54D2A6C8FF1AC24BC217C68ED3336D1CD5518", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772896636, "uuid": "e75d31dd-c3a2-4e6e-bdfd-1fee951144f4", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/Jl:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772896636, "uuid": "46b02e46-9b88-4e77-8801-a16a6db2fe91", "value": 76744, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68046112-1a39-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772896928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772896928, "uuid": "887632fe-2d82-4b9a-ab92-efb21fe9fc52", "comment": "Malware payload", "value": "c4374912473cd42cfe4e1abab51af40e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772896928, "uuid": "56c8e5eb-4d33-494f-9e57-ca3faa9ab512", "comment": "Malware payload", "value": "212c76daf355ede116eb04d4f9d08a112d07940a14dc248bc568ff1ba0a64e18", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772896928, "uuid": "7405c70d-73a6-490f-bc91-937cf967245a", "value": "T13DD4F8B462047880C4AAA7729D74AFA8E23D11A9DFCE3ECC1194FAD01FB37557A0D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772896928, "uuid": "f9465459-fa70-4793-93d9-6b0c3c1b5162", "value": "6144:ZJSveutXkgEoCqT2741a3LywBTwjMtxwHVMeOF0buUwKB:qeuhra7T42MMQf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772896928, "uuid": "a8e846e0-0e64-44c5-9d28-9a6074ac4359", "value": 617316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772896928, "uuid": "88262863-e311-4576-abcf-8b0be07ee776", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9a1ac1a-1a3a-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772897468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897468, "uuid": "e0d32638-6fe5-497c-9220-4fd26a2309a6", "comment": "Malware payload", "value": "e2c93a24915378f282b83c3dda402dbf", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897468, "uuid": "f0700f29-6188-4d9e-b417-4af268ef6858", "comment": "Malware payload", "value": "be3d3c3faf1e9f3a74e6bbdd0ad36c1358a92b68f93a19d7c19685eb9277c147", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772897468, "uuid": "a04d9a67-5614-4f5d-bc61-1ed01c5ee3de", "value": "T12AB4231AF4D078CFD68ACDA394291C785F6C96C9CD126B7247C4EE9312442FA27A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772897468, "uuid": "fde1f1cf-6eb1-4cb4-a63e-4eac978fa1f7", "value": "12288:xTibgSMFBOBSlqrdKu7FxPbzJTVBU+8JM9hAC8Z3kVOBRkbKQDiUbpKQ:4cSMFYzKkxpTKJM9mCw3kVOMWAPbpv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772897468, "uuid": "6ae0a7d3-845f-4d4f-91b9-a693171b26cf", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772897468, "uuid": "4e408f76-20dd-4b5d-a15b-b34820e26377", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa228415-1a3a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (SmartLoader)", "timestamp": 1772897469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897469, "uuid": "3d7d5ac1-5f3b-44e9-913a-46e6d1c48432", "comment": "Malware payload (SmartLoader)", "value": "2fe5604dd602762b382fa812436d5352", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897469, "uuid": "111b4df8-9051-4604-addb-a6cb77d1a46e", "comment": "Malware payload (SmartLoader)", "value": "6b30c4ad47bd3435d727c76c87fcee66d668b694405b36f4ff2fe2f879a2918a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772897469, "uuid": "1c1ef63c-c6df-4581-8eaf-22bf5e5373e0", "value": "T176C4239603689624787407B197BF9F8DC6028E5329921BFD9FC8BF0CA1356489D5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772897469, "uuid": "9be67037-174f-438a-9688-f169d9097410", "value": "12288:oOCBcIqB0liubzqtYBpfsz4TKPozt4CTo4Pl/2Ar57:oZ+LubzqyB9sz4TKPE1l/Zrl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772897469, "uuid": "792cf3fd-db15-4b00-ac93-7d346758b197", "value": 546982, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772897469, "uuid": "85066cfa-75a4-4dc2-b83d-9507ccba170d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f112a0d6-1a3a-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772897588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897588, "uuid": "c0339004-b298-4001-85e2-ee74442bc1ae", "comment": "Malware payload", "value": "49e8cfe3cf7c01ccf5ad061e054b63a2", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897588, "uuid": "987f753a-5a00-4b16-a5e3-0527b390002f", "comment": "Malware payload", "value": "5d8d196674f962cdce0de4e9a8b282feed45ae36f8d5bf86a662249e23e8c7ab", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772897588, "uuid": "76241d4a-7a4c-49bd-a338-302e18b6fdc5", "value": "T126B423CCB6CB88CC55A63134E6A20B4154DBBF33B2DF7391B5B849700DE6A6710297", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772897588, "uuid": "afd1505a-2c07-4d43-ac3b-0f371cd0e32f", "value": "12288:vwsK8MG1KnyC/G76u6M0gXar5qduxct2ien3P+bej:9KGcGmuwjpQen3PwK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772897588, "uuid": "8a811e93-6654-4506-8690-92b23b2c8e3a", "value": 515391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772897588, "uuid": "2d3eae21-c78c-4e6d-8b23-c2e49923a6f3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "408158a7-1a3c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772898150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772898150, "uuid": "f4d02bd6-ff40-4bf2-ad60-4f35f9a0a24f", "comment": "Malware payload", "value": "b3eda650fd36523bfb8b778e4be0d95a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772898150, "uuid": "f193e811-bc64-4fcd-9848-7c7eec07f907", "comment": "Malware payload", "value": "2e9bb5d59fd64f6b63f09e46aea5c1fa4eeea0c3463d1176c9af248cd22f1470", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772898150, "uuid": "de376406-d824-4571-b78e-8591cdaea929", "value": "T1B134F1C7A620E922CF4E09274138FD70965467BE04CC6E773F26419BC067A6CE66D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772898150, "uuid": "395da41a-43a0-47df-978c-bd0ec83ca55a", "value": "6144:DxFggce8PGXuq8yCXp/s4TiZxPPxieDI/C6VzBeh:VFgpe8Pmk44TCRieF6z0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772898150, "uuid": "9a666e9e-2a53-4b37-96bb-10c884165e59", "value": 247896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772898150, "uuid": "d2b960e4-e887-4deb-9d7c-c0905d78e028", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc44c58b-190b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772899329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899329, "uuid": "de1e9f39-b458-4109-87f7-490f0e0d18db", "comment": "Malware payload (Mirai)", "value": "917e4ecaf26683cfa36fda7899ce8e67", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899329, "uuid": "c310693d-5fc7-41bf-8acc-442d362325c6", "comment": "Malware payload (Mirai)", "value": "2967f78d71dc4c0f29f1a4b8c2dd40cb0a2db03ed09e4fb0c577e7f5ea0299ae", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899329, "uuid": "227b5ee7-ea2e-4117-88d4-eec200a217d9", "value": "T192F3B50E6E198F7CF79987344BB79E32965833872AE1C582E16CD7105E6024F641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899329, "uuid": "4fb7c34e-ddfc-4301-991c-2ab178e53fe2", "value": "3072:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJBQX/uw9EfszRpSP/Q4vkTTzTT4BFZDiwZ:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772899329, "uuid": "e6ccc0ec-6cbf-4ba7-b1ae-de0ac2173098", "value": 171724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899329, "uuid": "e5765256-cff0-4617-97e7-1a2441a16fc7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06d206dd-1904-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772899329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899329, "uuid": "dba58ac0-8b1a-4f14-abfa-c468a9c833f5", "comment": "Malware payload (Mirai)", "value": "4458a8e933bf613b765376bb60da1ed1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899329, "uuid": "fc57d39a-3cac-4b1b-8291-8a0e3eb388c1", "comment": "Malware payload (Mirai)", "value": "bf113dd0b032f4abd156a6fc9af4928463b3882e554eb1fea5b4df5885b58213", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899329, "uuid": "90e732e4-36a7-45c0-a3f1-0238dcd7c711", "value": "T13593E551BC82562BC6E423BAF6BE668D336577E5C2CF722BC8214B117B8551F0D63B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899329, "uuid": "f916f63f-479d-49c0-b93b-ea4107ef5b85", "value": "1536:PWrd+dC++zBz/dPXQL0u4WaJuLaVlW04brj9uYpMNGY2LYghb:PO+d8zBWLac0yMNGFlh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772899329, "uuid": "a223ff7c-f9cc-4512-b991-e6196a30de7c", "value": 93804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899329, "uuid": "a43e6a8c-0fe7-45ae-9253-aad8f578f6cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23abb05a-190b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772899329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899329, "uuid": "82029cbc-4bc0-4fc8-8b49-7c076c1cdc16", "comment": "Malware payload (Mirai)", "value": "bb73c96692a3b2becc1d8f9a14d8f35e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899329, "uuid": "3a365b8c-f98c-4ce9-a748-a0c77274c3cc", "comment": "Malware payload (Mirai)", "value": "126bb7fe59f613f236a4e007a19b4952241162b3af3f8a41e1b2faefd6746f67", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899329, "uuid": "830dd3ee-12d6-4455-8422-31d3028f72d0", "value": "T10EE34D8AF802DE7EFC0BE57E44670D15FA30A7613243172D529BFDA3AC321A65D16E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899329, "uuid": "3d7b8bad-8dc3-4336-a371-64658fba010d", "value": "3072:luWypdcGShA/TtPq6ND6ZJ243nxl9XzrTmduH:gCGShArdDPAxl9TmduH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772899329, "uuid": "45c44e50-6eae-4c07-b4a0-bed64a1788e1", "value": 146888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899329, "uuid": "38214cbb-21ce-4b67-9047-27687c4ce459", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1b3bc7d-1900-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772899330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "e926dfef-3a9b-410a-934e-bd7e46ee22e4", "comment": "Malware payload (Mirai)", "value": "67bfc8f21a1fcd140e1f9294dd5fd280", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "ada8d1db-cb45-4812-ae0e-89084d598de8", "comment": "Malware payload (Mirai)", "value": "b7b86adb378b1c9dd37e9b34327be1c54b1ee44e122b12d6c73ea1eb49fb9913", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899330, "uuid": "e65f995a-a8a1-45c3-a308-e86d05cb6501", "value": "T1E2D34A2275391E2BC4D0A87E22F74361F1F167DA25A8C90E7EB20D4FFF252206547A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899330, "uuid": "f78713fa-3180-437b-b317-8462310e5e69", "value": "3072:lCldeCsOs9kzj2vV4XcZgqniE230IO1BlsT3j0A:APeCK9kzivVYQitymTT0A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772899330, "uuid": "8131937e-cc89-4857-9881-ad0ffcbc613a", "value": 140776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899330, "uuid": "c1d8e478-d810-4d35-bbee-8339f61d3451", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7beccb34-190a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772899330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "6793355b-5009-4488-a7d1-aad18531e759", "comment": "Malware payload (Mirai)", "value": "0d743ab91910850360107221526d2d25", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "62188578-b203-4538-ab6c-4de3e2ed6321", "comment": "Malware payload (Mirai)", "value": "bac8eaae693e2d7b18b917d8c52e00eeefdc9bf1014b324a0b1ab16b7f3e13ef", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899330, "uuid": "bb7ce43b-5c1d-4071-b897-be8f9b550e51", "value": "T1A8D33851B9829A27C5E123BFFA6E018D332563E4D2DE72178C215F217BC691F0DB7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899330, "uuid": "b1adc4a4-39c8-4f89-b04b-29175854c14c", "value": "3072:snFif7apx6XS+kUgpjWXQQKMs0u29wzulziQSc:sn8ZS+dQWXQQK5s9TeQSc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772899330, "uuid": "bcc91184-c4f5-40a7-a783-a22cd8bdddde", "value": 140756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899330, "uuid": "b0efd37f-efb0-44e3-a869-3996d471d13b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c90b6aa-1900-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772899330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "44c3c03a-0ce1-4eb4-8a82-9ab692932f1b", "comment": "Malware payload (Mirai)", "value": "8382c75d2af1b602a9935c8fc79a178f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "9c0178b1-31ab-4817-99c1-b6b581facf10", "comment": "Malware payload (Mirai)", "value": "fd78729bffc56f9801c75072511c81bc29c530d05af5b614dcde352b6f1dbf5a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899330, "uuid": "81a98065-dac3-408a-aac8-ff1a6cdef8b8", "value": "T172E33A55B8828A22C9D513BEF92D018E331327A8E2DF7213DD205F2577C7A6B0D77A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899330, "uuid": "51c3e8d4-6957-49e8-85f5-c7f765e2e30b", "value": "3072:8NMcOPLZDozjefDoHwreWu1gSa0lI7TEy6KuImkE:IOBozje7oHWuOSa5F6K4kE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772899330, "uuid": "911f51bb-a499-4533-b842-b12e54177919", "value": 145552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899330, "uuid": "123fc380-62a2-49b8-bd90-3ff5b41dba18", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6edda56-1904-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772899330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "5651f414-1920-407c-93da-73d945512cb9", "comment": "Malware payload (Mirai)", "value": "124a3af41b4eb8d5b8b3f7e7701dfa49", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "aafbcfa4-6531-43f4-89ae-834f4f0ee038", "comment": "Malware payload (Mirai)", "value": "002755d98cede8bf9bb7fa3dd4665cb35aaa8ac3b7b3ad4a81befb64622cbe55", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899330, "uuid": "c044313b-3d81-47d2-be34-d7ec420f4e2d", "value": "T16FB339C1BA43D4F5EC1641306177F73B9A32F0791239DA87E7A89E327C92A419D0A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899330, "uuid": "834da1d8-842f-4d88-bc82-6c65ff83b2e4", "value": "3072:PbKW4dCLFaGFBu3/45g1rcV2w4zSr9bMFfln:Pbj4doYGFB0/45gdQ9uln", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772899330, "uuid": "4d00363d-a4d8-43d5-8030-c0934fbea3f5", "value": 107824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899330, "uuid": "0a7b36f7-fb59-40c8-9d0d-b21d037025c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "055cebf9-1904-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772899330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "485f5755-924d-4ea6-a1f5-3ef979f8fd20", "comment": "Malware payload (Mirai)", "value": "a45831942181d111b5cd41c9e4e37ade", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "4435505e-1d13-43d6-aee8-e2474255a2e5", "comment": "Malware payload (Mirai)", "value": "375b90f092061faa5842a013514d17dca2f9d1f326c73aaece02759875ae1fe0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899330, "uuid": "3066fc43-9231-4d74-b18b-0deb028a91a3", "value": "T184343B45EA418A13C4D117BAF5AF418A3332A7A5D3DB7306D9246FB43B877AF0D636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899330, "uuid": "0670122f-7998-4a98-a9e8-94f175028ee3", "value": "6144:Ego/jNgGzHzakeqacEp1d4n1trkbf9ihM/9+AU:EDhgSHzakeqacE3W1e0G/4J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772899330, "uuid": "29c0ef9e-aee3-46fb-874c-6ea99c0bbe7f", "value": 230976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899330, "uuid": "6d0d35b5-0746-432c-89a2-3e9e5f9dd2be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bf55c79-1900-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772899330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "c7df3ea3-ed23-42c6-a624-b3dcb4be356d", "comment": "Malware payload (Mirai)", "value": "a2b58c193298cdd45bb91256c1438591", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "34d86c6d-fe74-4cf3-ba8c-eab5b2ce797b", "comment": "Malware payload (Mirai)", "value": "39d68839e8a19b23d13e68bae166b5ae36596fe9831decaf68d5f1d1e2f1588d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899330, "uuid": "2cf5de04-2857-4ec0-a110-d8f0042870a6", "value": "T1C6D35C0673180E17D5A349B02A3F1BE083FEE5D121F0BA89691F9B6A8676D371485F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899330, "uuid": "a37dea0a-9f52-4921-8aa7-3945d4c49914", "value": "3072:CV0zui1ZhMHJCIqWrpP7OUK3y0uMg9FkiH:LP1Yiwd7OUKC0uMg3kiH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772899330, "uuid": "0e64e1e4-d4c4-43fc-b9ba-9e3b592c0530", "value": 134336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899330, "uuid": "fd6a752f-d74c-44fa-b3aa-e4955b6b1903", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2dc668b-190a-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772899332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899332, "uuid": "3c7f66f8-0b60-41de-8c9f-c6d1874edf45", "comment": "Malware payload (Mirai)", "value": "389b35caf751497f377103983eb27268", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899332, "uuid": "13c50aca-9a65-4577-9684-3a0a0986b48f", "comment": "Malware payload (Mirai)", "value": "7fc132b9b986683ae456c4d31b98427008584d9b0ff05684804419c7bb5ae585", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899332, "uuid": "faf854e4-f1de-425e-8b00-1955864b7202", "value": "T146C32902F98584FCC0CAC1340B6FB63AA976F1DD1238B2EB67D4AB123D4EE615E1D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899332, "uuid": "6525d478-773b-4fc7-a108-ec6e17505478", "value": "3072:e483TghM/1weZbcnITO1yosFAIxnJdhgpDb7BeyPBupmzQUAdojgaR/XN:eH3TghM/1weZbcnITeyosFAIxnJdhgJZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772899332, "uuid": "b94171c5-3451-4994-8bea-b318a82eaaf5", "value": 125472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899332, "uuid": "5d110099-d408-4a50-9f41-1b03a1cbb8e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "892aece5-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1772902567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902567, "uuid": "d4f5fbaf-4189-458e-a12e-176af472d130", "comment": "Malware payload (AsyncRAT)", "value": "1f67b37e9d0c1fbaf1e36dfb52cc19fd", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false }, { "name": "Xworm Rat", "colour": "#d16099", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902567, "uuid": "d89da4f7-610a-4fcd-9151-2eebb00a5304", "comment": "Malware payload (AsyncRAT)", "value": "3567002335bf0f049caf90c27b69512a4fda0a47c6cd3cf6e4498372f1808111", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false }, { "name": "Xworm Rat", "colour": "#d16099", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772902567, "uuid": "f11a77cd-5cd6-469e-b8e0-f1d27f6540c1", "value": "T174635C187BEA8125E0FFAFB11DE132A2DA79B7235513965F10C4435B4B12E85CE423", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772902567, "uuid": "02e597cf-bedd-482e-9ee0-9d32027fbb28", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772902567, "uuid": "fb568cd0-01d1-42bb-a5da-a61ceedbf246", "value": "1536:YDoeZttbyYcxU4SyCqdxq5zbik7reqLnZiR8gbCzdTOQeiUIRa:woUttbyYcrhq5zbiyvSbW9OQeZia", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772902567, "uuid": "058755ab-2e4f-45f5-bb3e-ffe0c8455fea", "value": 71168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772902567, "uuid": "6d310b66-8e79-4807-9754-150cf221e759", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "893b7734-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772902567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902567, "uuid": "98f41fb2-3c1f-4fae-aadb-5e36b137e67e", "comment": "Malware payload", "value": "461fc48da78e63a132e9c30948b26eb8", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902567, "uuid": "53f72877-6e5c-4ea7-89a1-5fde29d88f23", "comment": "Malware payload", "value": "0d869d22807ae377407d3002e4be2abeb0cdf451392eb4a458bb7b5f16e1c6dc", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772902567, "uuid": "45adb7c8-95a4-442d-96ad-11ea99f2933e", "value": "T104E33919DFE54C41E9D808BD85734104CB34A0FA6542B38BBB95E0A20D51FDDEA7E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772902567, "uuid": "3d8eb2da-f6bb-4386-8c5e-e8520b7c15d7", "value": "3072:jpLBkjfIy0rklaKZJTL1QXn6Est6LFwbYwM7aN6HnWKF8X0T7E:JkaKVQXn6EsYLabl4a8ykE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772902567, "uuid": "28b02f23-f8be-45e0-a2e1-5bcbdd38c40b", "value": 155648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772902567, "uuid": "7d20b063-51ea-4fae-b84d-0f09d1d4ff88", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea6f5736-1a48-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772903589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772903589, "uuid": "7acb5071-2ce2-423a-8e41-7db32768a5ee", "comment": "Malware payload", "value": "6a51c0c5c0660442df5b5692cb539da5", "object_relation": "md5", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772903589, "uuid": "87f72045-a554-4269-a9b6-c23c7848aa93", "comment": "Malware payload", "value": "c78dda13c227492b31b9739d7ab81ff44fc55ee2b9dbff117270e5bb392dcb73", "object_relation": "sha256", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772903589, "uuid": "c49d23df-dc72-4c07-a5d4-d3f1625a6f22", "value": "T16BD56BA688B1FF13B7AA8E4873341E5D101426370FCB150AB4BEE7C67683975346F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772903589, "uuid": "f98e33e3-3bd6-494f-ae20-995c17d40fe7", "value": "49152:TK0rN4F4Cd6Jag2j0riZgNudjDG8ZX8LSJFTnhvFRBW84FMotY:m0eF4xaDjDONijDG8ZxFTV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772903589, "uuid": "eb20eb0f-01ee-460c-8473-840675764353", "value": 3000830, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772903589, "uuid": "14f5c7de-f106-455b-9784-1459ef235b9d", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f782a341-1a4c-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772905329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905329, "uuid": "c5158495-1daa-4118-9274-49f080a3a926", "comment": "Malware payload", "value": "b300ced4550e23bf3712d825095ac4f5", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905329, "uuid": "326e8817-2701-4125-a70a-f3f57b1d2d93", "comment": "Malware payload", "value": "ea47cebe2fbbf06c22b9bd9b9d72dd4fe64aed4e68675aa5e693312a773e09e9", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905329, "uuid": "08f6748d-b2b1-42a1-abe9-1c7627cf9b5b", "value": "T16EA633E0F584AFC1D121D93153F880A5FADE18666093DC62BC132F9E65936F3B7AE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905329, "uuid": "602ad997-0349-4aa3-8672-6015bd4c3ee3", "value": "196608:y5+uWL63x+mb2ZYYLyIPVmzOcLqnDXBLmWUYQrpyhGpDHC0dzBGSc9CPZ8K7//4:zL63Mmb21uhOnn7FUNyhGprLz0gh8OQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772905329, "uuid": "77a7de1e-af75-408d-904d-4ad45a970536", "value": 9525729, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905329, "uuid": "69077d5d-af42-4a6d-a29f-d28205a5da8f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62ffbafc-1a4d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (CHStealer)", "timestamp": 1772905510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905510, "uuid": "675cc270-c341-44bc-bcd3-ed336967e5fc", "comment": "Malware payload (CHStealer)", "value": "1073c20c06b4a9a1bedced0afff46058", "object_relation": "md5", "Tag": [ { "name": "CHStealer", "colour": "#8d3cca", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905510, "uuid": "89feacaa-2e95-4ded-b6b9-f95d79a57837", "comment": "Malware payload (CHStealer)", "value": "dfdd4cdf6dd89b4c50a2ad96be9f2aa4c6e1c08ae50eb1de8169827555b0ef89", "object_relation": "sha256", "Tag": [ { "name": "CHStealer", "colour": "#8d3cca", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905510, "uuid": "7fc0f50f-699c-485e-b923-3d7706aaaa64", "value": "T1C79439A29F5B6E18E5D1A3F8A2253AD4E896BE351BF5D1FCAC2074145B3D361F0CE0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905510, "uuid": "e135c6b3-2475-4621-9278-62087f2e99dc", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905510, "uuid": "8835e375-21b7-48af-b441-2306f05c2394", "value": "6144:rR76amUMYsqooXDvngI9WzeGReGrWzLaW6gM/d:rRua+YnpTYI9WyzLv6g8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772905510, "uuid": "17c942af-299b-48d1-bd0c-d40d612fd7a0", "value": 433664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905510, "uuid": "983a64a0-1d24-4cda-a8db-5b244020a566", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63fc3649-1a4d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1772905511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905511, "uuid": "3a2e9d78-1bc7-40ce-b4ae-42a39e852c51", "comment": "Malware payload (Smoke Loader)", "value": "e570255a304227095bd635a92f9720ba", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905511, "uuid": "2b2c7849-bf5f-47f9-9608-49e5fc6e33a6", "comment": "Malware payload (Smoke Loader)", "value": "86c6ae7c4fd825bf4bf58401e895acbef5ba52380bcb55c5149ba231c57eb03d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905511, "uuid": "29692b5b-11b5-4fb6-b533-ed4321f3d2da", "value": "T1AAC501322FDE5132E4AD73B4D5E17A05AE787D90E5944AF9E4A862C90C758003E3ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905511, "uuid": "a1416e93-274d-4280-97d1-cd5a4c30e9e2", "value": "49152:VljSvNCIk3PJSH6jypriqNP0WyvDtLH0/cvDhNlulRYQTeKADxJryXEQ9V1dIjnd:QNuxSH6u5iwOR0/ihNwlTT3KqXr3w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772905511, "uuid": "5fc82051-a746-40d5-892f-9421175f68c8", "value": 2711000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905511, "uuid": "c602d663-c1ba-4ff6-8f78-7684da336093", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "640e5ca1-1a4d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1772905511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905511, "uuid": "fe06b223-b027-4344-9a57-61ae93e2bbf1", "comment": "Malware payload (ACRStealer)", "value": "8a7ba7d1faf3cb908bb14fef90b23341", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905511, "uuid": "4429d7d1-4764-4efe-94a0-7a1c97b5bfd8", "comment": "Malware payload (ACRStealer)", "value": "c2475b4b179267d3dd7f9c54d9e9f39b21109baa2c5d7e5acdc5e49d11bb1e95", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905511, "uuid": "9f2ec1d2-c8bd-4171-a94e-6d4c9732dc9f", "value": "T1BE955A00EEC744B6E8071B3259BB62AF273598090F36AB97DB447A7DF9B32D50D263", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905511, "uuid": "33437a6b-c88b-44fe-871d-169a8f319b63", "value": "5af915f278815e76bad476ef32593028", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905511, "uuid": "0f6b7fc5-a22a-4ab6-8dce-3ed044168e5a", "value": "24576:MO50X1LvyxPSiTewBXPxnJUH2zrG+bv3bSKD1yarVBk1REK:M1a0iBZOivLJ1R7k1q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772905511, "uuid": "a5fa7935-335b-4641-889d-f6999e08f5f4", "value": 1897984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905511, "uuid": "4fb6c663-ff96-4789-9f05-676be98a8cbc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8739c31e-1a4d-11f1-8a4c-82aee05be84a", "comment": "Malware payload (GhostSocks)", "timestamp": 1772905570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905570, "uuid": "7669faae-79b7-4a20-8306-3afc99d6f998", "comment": "Malware payload (GhostSocks)", "value": "60fdfc5772ef21691341efbc3e081209", "object_relation": "md5", "Tag": [ { "name": "GhostSocks", "colour": "#AC3D0C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905570, "uuid": "c9f43acc-f5ef-4eec-87fc-bec13df8ed19", "comment": "Malware payload (GhostSocks)", "value": "46a9b249a70d194437c8f2d655003fe582aa4c108861448b34b6f9fdb8a80614", "object_relation": "sha256", "Tag": [ { "name": "GhostSocks", "colour": "#AC3D0C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905570, "uuid": "9316c1cd-52b3-4603-8137-ef63d6ed83a4", "value": "T1A38622B52EED5137E1F9B2B9F8B4250F5FA8BA9095A16DE854A0408C4CC48806D3DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905570, "uuid": "f3449f88-e7c5-4119-8de8-4f076c40de49", "value": "196608:+PEItqQpiEKQ3aZEihcrZSJrkeF6FVkHSH94O:CjqQoQ0FiUJ4QCRd4O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772905570, "uuid": "11b5e8b1-1cd6-422d-85c6-0a3e6f83f160", "value": 8138232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905570, "uuid": "6be1010d-7fb9-4732-91c3-c10510b93a80", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11e7cfa1-1958-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772906407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772906407, "uuid": "63bb5ca6-5d15-4dc0-8a47-9e3813f60100", "comment": "Malware payload", "value": "c0e4398459345ee5afa2ae477a733574", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772906407, "uuid": "e0275add-f343-4e69-abd0-cebfca561e14", "comment": "Malware payload", "value": "730e9e0bd0a41438d7d7af227f1441b4f9d8a54988e0add3a2e0fbd7312cc163", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906407, "uuid": "6ca96c4c-1113-4cf1-ab57-0705929d841b", "value": "T12B642351EC9C307BD9234DF3AD1F99CF5E6D7AE52D68D85CC214EC0AE2B992ABC605", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906407, "uuid": "a43a5720-a116-4a63-9ae0-63a7879eb979", "value": "c72d40c71bcbf3442320a9ed25ba079c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906407, "uuid": "a3186dfd-1f02-4ece-b617-0404c3b9528f", "value": "6144:G+R1G8O0NiIPoLt21g1Mauj/zlcQAcDLjoiOlDcXPcIQLwT:G+R1VOkRPgtb1yTzlcQfXjof5acNS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772906407, "uuid": "b77400a5-ad9c-4b9d-b612-608e42d7ca6b", "value": 307712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906407, "uuid": "1ba19184-5746-46bd-ac4b-4301c564a311", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ecb65b9-0e99-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1772906408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772906408, "uuid": "0d567ff3-4835-4f44-a111-b2e3b28c0ca5", "comment": "Malware payload (Vidar)", "value": "8fc5d2f4cc1fbfc5157cd90d3fb9a0ff", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772906408, "uuid": "b47cb0e9-917e-4e52-b82e-48244d0ea14b", "comment": "Malware payload (Vidar)", "value": "81c2df0f2ad75cd87e2197d64e0d4e2bb7f8040e9fbd53210fd09efdf17819ea", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906408, "uuid": "6b74a6f0-5ee9-420a-bd09-6d94b45f4ae1", "value": "T18D241203406DF35FE24A757E1FA7BBC222B2C7384B4F03D63855C8D6922E56885927", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906408, "uuid": "f89d6111-611a-46ca-b62a-7f9d38003d77", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906408, "uuid": "5169d65d-b1f0-497d-82c7-6af649430d00", "value": "3072:7nipVcxzhGwxvWeGJgwU3PrsKw6wYQyKBWJrZ0zBTAUZpjvE33WlwzYMO:rU4hGwNQJZU/AKw6EBWf0zCWu75O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772906408, "uuid": "45f467be-33fa-411a-987a-e9cf867276ab", "value": 217088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906408, "uuid": "694c56d2-ef80-4fbe-b6c2-dcc50c3e743c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca7325d7-1710-11f1-8e4c-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1772906408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772906408, "uuid": "ade1f72e-634b-4f37-a5dd-72e7c19597f0", "comment": "Malware payload (Smoke Loader)", "value": "36ff08aa2c7589a56368d7bb7c76553e", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772906408, "uuid": "abba73bf-dea7-4960-bea8-ca0dc3dece26", "comment": "Malware payload (Smoke Loader)", "value": "b1f0e9cacd5a27e0cdb5cb9cd259e62bfdfecdc96fee2a7a7a345cc97a7fc60d", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906408, "uuid": "a4c9b0e4-b2fa-47d9-910d-f421bb37d1cf", "value": "T12F945B217916C032D66292711F79FFF584ADB8259F7109DB7BC00F7699202E26A31F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906408, "uuid": "a2c6a40e-3593-4af0-a581-31fda85f32db", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906408, "uuid": "6707b07f-40d1-4f2f-8131-84f34110fa97", "value": "6144:QbDHF0VKkWrb4QC1uwzV3ohQU1d+/mN9peVHzsAyuWZGUf/Sdfy9103T7fms4AOk:6HF0VKkWrb4QDwR4QWdyzsAlWZBR8qM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772906408, "uuid": "db6edd6a-6517-4773-a149-f0a23caefb3d", "value": 444928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906408, "uuid": "1b7224d2-388f-44d5-9010-81494b12a5c3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c4d3ff6-1a4f-11f1-8a4c-82aee05be84a", "comment": "Malware payload (OffLoader)", "timestamp": 1772906411, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772906411, "uuid": "f3ef0892-669f-4c9a-bfac-81363db408b7", "comment": "Malware payload (OffLoader)", "value": "7ec825e36348768c4102a157e03a81af", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772906411, "uuid": "0186231c-2112-40f1-8cdd-e0525ccd94ba", "comment": "Malware payload (OffLoader)", "value": "9b0ab236f901d2cd91d29f7dfbd411702a525d7dcb07194ee3ff2d0ec4a9d81a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906411, "uuid": "437bd2df-fec1-49d8-a464-1553abe233b3", "value": "T11B96F133B28A673EE06E5B375AF292205D3B7621A50F8C5696F40C4CCF291A01D7F6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906411, "uuid": "0ad7547d-f39e-4299-878a-e6987337ccb9", "value": "ac4ded70f85ef621e5f8917b250855be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906411, "uuid": "3e588c32-2899-4423-957b-6768a556a7ed", "value": "98304:nN66NKsbyKLx+KEmzWPgp4AuPpdxjr2YZX24:fNzbyKtGmzWDAivdr2Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772906411, "uuid": "5ac279cb-03b5-4222-a969-3b22e8b07f68", "value": 8843065, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906411, "uuid": "20107fdd-0f5f-4d1d-ad47-47d6457e572e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce99bb23-1a53-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772908267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908267, "uuid": "60a6a209-7706-4b98-8b5d-51afb1e28d7e", "comment": "Malware payload (Mirai)", "value": "f7f69c63d16b9167210721f7b1cbd6ea", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908267, "uuid": "b57afe2f-a9e1-47d2-ba31-06292a2608ca", "comment": "Malware payload (Mirai)", "value": "5fae4370735e01518bfa6fa64491e947ac864e31b960379a7f8192b0a1c67f00", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772908267, "uuid": "fd62509a-d435-4d07-b6c7-a10e8f7892f1", "value": "T19DB31A56BD829F13C5C325F6FBAE02483B126B78D6EE3142ED247FA127478DA0E275", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772908267, "uuid": "61e78abc-806d-419e-a995-b790d5601628", "value": "3072:olJVJd1NCX4Clv9D2RqcjS4A4DM4vwhy9rX:EVJd1N89VUdjS4AaMfhIrX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772908267, "uuid": "8279ac6c-0b61-46f7-981a-77fb18460131", "value": 113068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772908267, "uuid": "ca011376-a881-4f86-a29a-48394a20708f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f54f7bbc-1a53-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772908332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908332, "uuid": "ee619b04-2a72-4260-a056-45f3dbd1f528", "comment": "Malware payload (Mirai)", "value": "2702605847ab7e4389a1fd8b5b43836f", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908332, "uuid": "67ae9241-0c59-4ee2-935e-be6b7556a334", "comment": "Malware payload (Mirai)", "value": "4c5efe32d54de7b8c37fa0a4f242b905cd21fe3dbde1c44b7dba9f044d87c551", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772908332, "uuid": "5580c3e5-55c8-4a6a-a8da-6c11f0672e17", "value": "T161E47E9CFE4E3D42E2D7E27C9E4D87E1722B71E0D32391A37982434CD5CA9D98BA19", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772908332, "uuid": "aebaf294-d4a4-4a92-bb99-b5cb9a64f5f4", "value": "12288:51uI+T0jtDM7sMtkEZUApV3BzuYyyiT6bgDnjy1/8Uw5dWMqUnad:uD0jts1ZRpV3ByYyBm1GCXUa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772908332, "uuid": "8561d513-ec85-4f1f-ac20-5dbbedd722f4", "value": 701744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772908332, "uuid": "68f04fad-55fb-44d4-9b59-110d3fb2edc4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9586ff1-1a54-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1772908634, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908634, "uuid": "b51acfbb-7ee8-4da3-b832-d44a84b48e78", "comment": "Malware payload", "value": "201a808756ea234893fee20bb524b05c", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908634, "uuid": "423f1460-7481-404a-898e-a68e814f6ac7", "comment": "Malware payload", "value": "b8e4db27a7347c05c3e9d42a6e04f9bf8ae0b0df6a78fb68c9d818bccd7a68ec", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772908634, "uuid": "23ac961a-7b11-433c-9275-f856888d4ec9", "value": "T109146B0927E610A6F0B66B7499F102934A3A7C637B7592FF5784803E0E336C4A971F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772908634, "uuid": "e17af344-9d87-46dc-896d-845c1057ec68", "value": "9da7080b9b697496fd4f41997e8bd436", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772908634, "uuid": "5c92de15-6df9-458d-87cf-4485a6bfc7b4", "value": "3072:8RLCJxDxQxsO8lM51B5GWp1icKAArDZz4N9GhbkrNEkOlKn/:NXDxQrbp0yN90QEHK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772908634, "uuid": "323b0546-e3df-4647-922c-3b2d94da1594", "value": 196608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772908634, "uuid": "2210e101-2ebe-41f9-87a6-4b772e1053da", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bc7ced8-d7ce-11f0-b111-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1772912634, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772912634, "uuid": "a4d57150-b9bd-459c-924d-125388579eeb", "comment": "Malware payload (RemcosRAT)", "value": "431da47a6b8e30bd7d01fd28fae83cbc", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772912634, "uuid": "26edad3e-bba7-44c3-a102-17250eeb1509", "comment": "Malware payload (RemcosRAT)", "value": "8fb876fd7e52699fe2c6f1bbc8e70552e06eddd813e9e5ce165fea3d6c354c9f", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772912634, "uuid": "35569669-a0b9-4404-97e9-5d596b91d0c2", "value": "T1621121CB49B61601B2C140547EA733922A94562B810AC560B10CB099DFC9F2E86E37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772912634, "uuid": "17b03a48-6ecd-4ce4-be6d-206fc33757e5", "value": "12:F6QclfhE0evXSJ+kJAxmkNjkYkRgHe8dLN3DHgXocB14zSvudJBr4olf4x7RHts8:FspENMgYgFNMNBqzSv3olfALs1BzU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772912634, "uuid": "9b9efd40-81fb-48a9-9430-33c1c21b34fd", "value": 988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772912634, "uuid": "a764448c-c693-44f0-a0c3-5019c9624bb2", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841741, "uuid": "ea3a6196-19b8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/psh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841741, "uuid": "ea3c60b7-19b8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/parm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841741, "uuid": "ea3c6870-19b8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/px86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841742, "uuid": "ea468aad-19b8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/parm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841797, "uuid": "0b5f43e4-19b9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/parm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841797, "uuid": "0b5f6c23-19b9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/pmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841797, "uuid": "0b694959-19b9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/pm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841864, "uuid": "3359e752-19b9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/parm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841864, "uuid": "335f41a0-19b9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/pmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772841910, "uuid": "4e854468-19b9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/6902778688/uxQfUNw.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "VenomStealer", "colour": "#d49dec", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772842157, "uuid": "e1cecb06-19b9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.41.188:52683/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772842398, "uuid": "71c4d929-19ba-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.241:46513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772842508, "uuid": "b3531557-19ba-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pres-mode.horspresence.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772842583, "uuid": "e01fa557-19ba-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.78.2:40299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772842879, "uuid": "904e2c4b-19bb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.30.2:33217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772843191, "uuid": "4a7e101f-19bc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.0.56:39690/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772843896, "uuid": "ee9754aa-19bd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.0.56:39690/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772844067, "uuid": "545d5dda-19be-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://petun-sys.albanianpetun.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772844847, "uuid": "255dc60b-19c0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://petun-data.albanianpetun.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772844910, "uuid": "4ae345e4-19c0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.93.137:47108/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772844975, "uuid": "71ca32d5-19c0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.53.106:43319/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772845518, "uuid": "b57c0411-19c1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.93.137:47108/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772845695, "uuid": "1e7d2be1-19c2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.10.195:44098/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772846409, "uuid": "c833e21c-19c3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dran-optic.draniercism.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772846591, "uuid": "3484a45f-19c4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cism-base.draniercism.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772847189, "uuid": "98f2b209-19c5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dran02.draniercism.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772847427, "uuid": "272f1447-19c6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cism-flow.draniercism.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772847491, "uuid": "4d5d14ad-19c6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.10.195:44098/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772847554, "uuid": "72b8b193-19c6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.227.79:32981/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772847608, "uuid": "9325f315-19c6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://rein-dock.reinsurundock.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772847798, "uuid": "046e4439-19c7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.164.225:50559/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772847908, "uuid": "4579faa5-19c7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sur-vault.reinsurundock.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772848388, "uuid": "6428dcd1-19c8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://rein-v44.reinsurundock.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772848407, "uuid": "6f0ff755-19c8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.15.170:59239/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772848829, "uuid": "6acc0ad0-19c9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.127.20:40270/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772848929, "uuid": "a62677da-19c9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sur-sync.reinsurundock.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772849420, "uuid": "cb05b257-19ca-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.227.79:32981/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772849483, "uuid": "f06082ff-19ca-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.164.225:50559/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772849526, "uuid": "0a178dcc-19cb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dance-vcr.dancingvcr.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772850203, "uuid": "9d8b644f-19cc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.86.221:60894/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772850444, "uuid": "2d56bb13-19cd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.165.160:56849/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772850496, "uuid": "4c49409a-19cd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.29.206:48762/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772850623, "uuid": "97ff398e-19cd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.29.206:48762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772850629, "uuid": "9bd6149c-19cd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.47.213:50338/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772850790, "uuid": "fb71b87d-19cd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://move-node.dancingvcr.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772850921, "uuid": "49826ae3-19ce-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.233.214:48305/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772850967, "uuid": "654437a0-19ce-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vcr-logic.dancingvcr.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772851147, "uuid": "d0294ce5-19ce-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://dance-v9.dancingvcr.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772851281, "uuid": "206fbfcf-19cf-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.84.135:39767/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772851886, "uuid": "88ee2a8b-19d0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.47.213:50338/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772851989, "uuid": "c66e6eba-19d0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8468794285/5vroDFE.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772852421, "uuid": "c78a5e62-19d1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.171:60885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772852781, "uuid": "9e0dc9cd-19d2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.233.214:48305/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772853193, "uuid": "9425d091-19d3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.181.225.93:60263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772853618, "uuid": "916d268d-19d4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.124.133.173:57341/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772853619, "uuid": "91df29a3-19d4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.31.86:54913/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772854268, "uuid": "14785d0b-19d6-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://lent-net.chopexcellent.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772854867, "uuid": "79df0ea0-19d7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ional-hub.nasotoptional.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772854880, "uuid": "811f7e0c-19d7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://file-viewer.detprod.com/acrobat/file/start_rmm_v2.4.0.68_oida1ecb191-39b6-4334-8f63-2cb6c5385be6_bidQ2uaAqj91kmIakbIMDyJmw.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772854938, "uuid": "a3fe9c32-19d7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.14.88:45615/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772855170, "uuid": "2e1ad5fc-19d8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.14.88:45615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772855170, "uuid": "2e2dd5c4-19d8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.124.133.173:57341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772855234, "uuid": "54a87611-19d8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.6.14:41003/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772855234, "uuid": "54b1096e-19d8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.167.244:50327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772855359, "uuid": "9ec68b26-19d8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://us04web.zoom.us.3cm.us/Windows/download.php", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772855652, "uuid": "4dd62eab-19d9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://adobe-viewer.parallelsw.com/acrobat/file/Pro_rmm_v2.4.0.68_oidf2c0c91d-dfcd-4480-ab33-273bdee33c5f_fidhwkNyISt4EK3ZdGQHkGtMQ.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772855716, "uuid": "7396bec6-19d9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://us05web.zoom.us.1ax.us/Windows/download.php", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772855898, "uuid": "e0067b33-19d9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.185.17:53039/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772856077, "uuid": "4ad9443a-19da-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.230.99:49584/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772856500, "uuid": "471427c2-19db-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.167.244:50327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772856671, "uuid": "ad32c9f7-19db-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://adobe-viewer.iziliang.com/acrobat/file/zoom_rmm_v2.4.0.68_oid32c9ba59-68df-4a50-9e7c-1a07b2ac80d9_bidBqKhsPYV9E2SHdgskYRu0g.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772856672, "uuid": "ada9fc9c-19db-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://us06web.zoom.us.tobuy.us/Windows/download.php", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772856676, "uuid": "aff7d931-19db-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://file-viewer.alcapps.com/acrobat/file/Pro_rmm_v2.4.0.68_oid1524eda9-e102-474d-8c72-5dc11f4d9b0a_fidwSSV8saQfEiD32U5J1fN8Q.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772856910, "uuid": "3b54cd85-19dc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ional-sync.nasotoptional.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772856984, "uuid": "679dbcc0-19dc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.144.20:58307/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772857208, "uuid": "ed1f2ae2-19dc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.164.94/n2/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772857208, "uuid": "ed20d20d-19dc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.164.94/n2/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772857208, "uuid": "ed3d01a1-19dc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.164.94/n2/teleport", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772857209, "uuid": "edb44de6-19dc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.164.94/n2/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772857638, "uuid": "ed238b77-19dd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.229.116:51863/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772857752, "uuid": "310d5f68-19de-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.53.106:43319/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772857754, "uuid": "3229a993-19de-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.79.211:55889/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772857813, "uuid": "55dcd861-19de-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.87:58362/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772858048, "uuid": "e17a72a7-19de-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://auto-compass.automodcompass.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772858476, "uuid": "e111e956-19df-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.144.20:58307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772858723, "uuid": "73b973aa-19e0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://adobe-viewer.mutluay.com/acrobat/file/Z-Pro_rmm_v2.4.0.68_oid2dfc226c-298e-4e3a-8120-73635d88c97e_bid6Olr7p!NCEGd-XXL4mNbJA.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772858725, "uuid": "757485d2-19e0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ssa.portal.muratov.us/home/download.php", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772858726, "uuid": "75927a8a-19e0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ssa.portal.ct1.us/home/download.php", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772858728, "uuid": "77180d8f-19e0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://us04web.zoom.us.hmail.us/Windows/download.php", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772858738, "uuid": "7cde8944-19e0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://us06web.zoom.us.ez2.us/Windows/download.php", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772859131, "uuid": "677a5ae4-19e1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.73:42875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772859666, "uuid": "a618f225-19e2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mod-track.automodcompass.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772859669, "uuid": "a7b6358f-19e2-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.172.178:58329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860029, "uuid": "7e7b03fd-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ssa.portal.tobuy.us/home/download.php", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860029, "uuid": "7e7d3187-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ssa.portal.eigenlicht.us/home/download.php", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860029, "uuid": "7e7d497c-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://portal.ssa.s-w-a-t.us/home/download.php", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860029, "uuid": "7e8d560e-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ssa.portal.cogitar.us/home/download.php", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860032, "uuid": "80476285-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://us06web.zoom.patho.us/Windows/download.php", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860036, "uuid": "827af71e-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://us05web.zoom.us.vdns.us/Windows/download.php", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860037, "uuid": "82f8a04f-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://us04web.zoom.us.pacl.us/Windows/download.php", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860049, "uuid": "8a7842aa-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.161.9:33874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860092, "uuid": "a3d79e19-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8548282130/trP9KGI.bat", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860219, "uuid": "efc6ad2b-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.6.14:41003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860447, "uuid": "77c55116-19e4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.73:42875/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860695, "uuid": "0bb5235f-19e5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://us06web.zoom.hiaa.us/Windows/download.php", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860698, "uuid": "0d5564b4-19e5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://adobe-viewer.0lsons.com/acrobat/file/Hamstra_rmm_v2.4.0.68_oid50deea8e-904c-4277-94ad-d32f00ba0060_bidi6UKA5NamUak6hwHpuWE5w.exe", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860699, "uuid": "0db1aec4-19e5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.zoom.kazoodle.com/Windows/download.php", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860699, "uuid": "0e02c995-19e5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.zoom.bigjaco.com/Windows/download.php", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860700, "uuid": "0e59e229-19e5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.unique.hatumena.com/Windows/download.php", "Tag": [ { "name": "GoToResolve", "colour": "#80ba4b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860747, "uuid": "2a87b4c1-19e5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mod-logic.automodcompass.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860763, "uuid": "33bc43a6-19e5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://us06web.zoom.us.chsh.us/Windows/download.php", "Tag": [ { "name": "AteraAgent", "colour": "#D30D02", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772860810, "uuid": "4fadcfb7-19e5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8548282130/trP9KGI.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772861543, "uuid": "05265171-19e7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.161.9:33874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772862439, "uuid": "1aa4191b-19e9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.250.190:36174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772862614, "uuid": "836e2137-19e9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.250.190:36174/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772863270, "uuid": "0a6eaeb6-19eb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://g70aw0re.bucketeuthan.digital/?=check&&actmn=rsVbayURMrZwROJO", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772863327, "uuid": "2c5a04a5-19eb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://put08.putreplay.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772863748, "uuid": "2738c499-19ec-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://replay-net.putreplay.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772864236, "uuid": "49e434f9-19ed-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.136.232:40455/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772864418, "uuid": "b67db0bc-19ed-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.86.150:56643/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772864802, "uuid": "9b8a60d1-19ee-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.114.53:41153/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772864839, "uuid": "b153658e-19ee-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.114.53:41153/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772865554, "uuid": "5bde7b15-19f0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.86.150:56643/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772865618, "uuid": "81a6586d-19f0-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.136.232:40455/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772866156, "uuid": "c264f855-19f1-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.216.210.134:46850/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772866926, "uuid": "8d618a8e-19f3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.204.206:39193/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867049, "uuid": "d6b06591-19f3-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.73.99:56852/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867165, "uuid": "1be71333-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/unique2/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867165, "uuid": "1bf3ee91-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://keitarocheats.com/api/download", "Tag": [ { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867166, "uuid": "1c4d0998-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.94.9.250/d/xxx59361", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867166, "uuid": "1c6a3924-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://pastefy.app/slc7jpkp/raw", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867166, "uuid": "1c82a8bd-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://tb2mod.com/setup.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NovaShadow", "colour": "#0db178", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867166, "uuid": "1caa2a19-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://baraltransportes.com/20khgc26oiwefoibfuww.php", "Tag": [ { "name": "Lumma", "colour": "#4dc764", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#4B557A", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867166, "uuid": "1cb84fbf-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://tb2mod.com/voidrealms-1.8.9.jar", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867167, "uuid": "1cd172e9-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://91.92.243.117/TaskSvc.vbs", "Tag": [ { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867167, "uuid": "1d345617-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.94.9.250/d/xxx89413", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867168, "uuid": "1dcc87c3-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://fil.ydns.eu/jhuytr/abcknIe.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867179, "uuid": "2451283c-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://103.27.157.144/api/download", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867179, "uuid": "246fa384-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://union.macoms.la/jquery.min-4.0.2.js", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867180, "uuid": "24e31fe7-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-826b2258a9f74a40abe9ee543f2409a4.r2.dev/3.600Hnevsak.zip", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867226, "uuid": "406ef60d-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://user.keio.ac.jp/~rhotta/hellog/upload/upload.cgi?get=00359", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867228, "uuid": "4153034f-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://user.keio.ac.jp/~rhotta/hellog/upload/upl/q4bRYpi9WFXyAHO4dIYG/python312x86.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867238, "uuid": "47767565-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.224.251:55651/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867601, "uuid": "1fd462c8-19f5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.233.248:46235/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772867776, "uuid": "87e0fb2f-19f5-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.107.0:42065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772868491, "uuid": "31f329c1-19f7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.204.206:39193/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772868562, "uuid": "5c53a586-19f7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.11.211:57452/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772868680, "uuid": "a2cf2371-19f7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.2.62:59262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772868728, "uuid": "bf2cba3b-19f7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://coralwil.draniercismn.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772868739, "uuid": "c5f9e077-19f7-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.233.248:46235/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772868916, "uuid": "2f6cb0b5-19f8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.40.2:41914/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772868975, "uuid": "52f8245a-19f8-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.107.0:42065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772869340, "uuid": "2c83a5fb-19f9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.241:46513/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772869386, "uuid": "4762d5b6-19f9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://n3ural-mark.draniercismn.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772869576, "uuid": "b8c02012-19f9-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.8.3:33273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772869758, "uuid": "2593129d-19fa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.126.17:43363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772869833, "uuid": "520b9d02-19fa-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.172.7:59227/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870125, "uuid": "0059a7d5-19fb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.112.100:35690/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870166, "uuid": "184a0375-19fb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mh738ng0.reinsurunrock.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870364, "uuid": "8ed96179-19fb-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.2.62:59262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870662, "uuid": "4037dec6-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.133/bins/kla.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870770, "uuid": "807d57cf-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.18/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870770, "uuid": "807e5bd7-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.18/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870770, "uuid": "807f10b3-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.18/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870775, "uuid": "838f3542-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870775, "uuid": "83906753-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870775, "uuid": "839078ad-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870775, "uuid": "839d81f8-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870775, "uuid": "839e73cb-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870775, "uuid": "83b1935b-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/bins/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870775, "uuid": "83b1fda1-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/bins/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870775, "uuid": "83bf9ce4-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870775, "uuid": "83c2dbed-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/bins/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870775, "uuid": "83c8988d-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870781, "uuid": "871e5747-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.18/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870782, "uuid": "87a122ac-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.18/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870782, "uuid": "87aaf52f-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870786, "uuid": "8a1a0a26-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.18/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870786, "uuid": "8a1a47a8-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.18/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870786, "uuid": "8a2a4ab3-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.148.121/bins/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772870902, "uuid": "cf7475ae-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.172.7:59227/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772871380, "uuid": "ec2b333b-19fd-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.126.17:43363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772871442, "uuid": "1160523e-19fe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.93.159:49996/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772871486, "uuid": "2b8201d4-19fe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pifn62.dancingvck.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772871501, "uuid": "3486befb-19fe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.112.100:35690/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772871561, "uuid": "5829e4ec-19fe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.172.38:48594/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772871786, "uuid": "de718c8f-19fe-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://stone3-lab.dancingvck.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772872086, "uuid": "90f4c42d-19ff-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cargo9-stack.dancingvck.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772872160, "uuid": "bce983d8-19ff-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.245.209:54579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772872160, "uuid": "bcf21401-19ff-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.221.247:35179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772872218, "uuid": "dfafe415-19ff-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://67.20.225.220:55355/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772872218, "uuid": "dfd4e04f-19ff-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.195.119:38772/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772872327, "uuid": "20b59e8d-1a00-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/8468794285/iBC1OE9.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772872508, "uuid": "8c69c3f8-1a00-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://0a6nq1j0.budenowcvolt.digital/?=check&&actmn=qMoLVibgciSorqTF", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772872508, "uuid": "8c9859cc-1a00-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://trispireum7.dancingvck.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772872580, "uuid": "b78a59b7-1a00-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.172.38:48594/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772873300, "uuid": "6497e037-1a02-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.192:45496/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772873357, "uuid": "86c40989-1a02-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.80.171:43346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772873601, "uuid": "1847e24f-1a03-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.245.209:54579/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772873666, "uuid": "3e793e48-1a03-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.192:45496/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772873669, "uuid": "40938678-1a03-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.28.171:46653/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772874792, "uuid": "ddbc16b3-1a05-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.109.80:35404/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772874851, "uuid": "01015e86-1a06-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.181.225.93:60263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772874908, "uuid": "2352a75b-1a06-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://passiveasset.caseoptional.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772874923, "uuid": "2bfae2b4-1a06-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.201.229:37596/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772874982, "uuid": "4f3e624a-1a06-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.28.171:46653/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772875398, "uuid": "4725fb9a-1a07-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.80.171:43346/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772875579, "uuid": "b308ab8c-1a07-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.251.122:37620/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772875988, "uuid": "a6da605d-1a08-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-5ound.caseoptional.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772875988, "uuid": "a6e2c44e-1a08-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.91.167:48085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772876650, "uuid": "3179a4ae-1a0a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.201.229:37596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772876893, "uuid": "c2228402-1a0a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.59.129.60:51336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772877316, "uuid": "be274449-1a0b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.255.231:54241/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772877568, "uuid": "547cbe01-1a0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.80.65:35576/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772877609, "uuid": "6d2496fb-1a0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.90.78:60716/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772877623, "uuid": "7512ffda-1a0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.109.80:35404/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772877668, "uuid": "905bdc04-1a0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://73rgwdew.getreplay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772877846, "uuid": "fa53546e-1a0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.37.63:37397/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772877847, "uuid": "fb0415b1-1a0c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://geneexp.getreplay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772878147, "uuid": "addb3a3c-1a0d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://crafshi.getreplay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772878581, "uuid": "b069d3a0-1a0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.255.231:54241/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772878581, "uuid": "b07cd402-1a0e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.59.129.60:51336/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772878820, "uuid": "3ec2adac-1a0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.27.36:35843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772879002, "uuid": "ab254e12-1a0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.168.219.238:46688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772879003, "uuid": "ac1ccf82-1a0f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.80.65:35576/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772879356, "uuid": "7e5cb613-1a10-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.37.63:37397/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772879768, "uuid": "73a11c00-1a11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.186.54:49370/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772879835, "uuid": "9bea177a-1a11-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.15.46:37022/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772880027, "uuid": "0e1a8435-1a12-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.174.127:49020/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772880571, "uuid": "5230f5d8-1a13-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.86.57:35219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772880610, "uuid": "6978a28a-1a13-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.110.18:39100/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772880611, "uuid": "6a7a9f8e-1a13-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ship-spark.redcrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772880621, "uuid": "704e5d99-1a13-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.168.219.238:46688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772881574, "uuid": "a8189b91-1a15-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.15.46:37022/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772881692, "uuid": "ee580ce2-1a15-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://drifstac.bluecrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772881938, "uuid": "811960fd-1a16-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.148.67:50436/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772882109, "uuid": "e7604ac2-1a16-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.83.43:53128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772882482, "uuid": "c5936e6e-1a17-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.86.57:35219/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772882529, "uuid": "e17da2a1-1a17-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://udfu.goldridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772882887, "uuid": "b6bfebf1-1a18-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://alignion.goldridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772884809, "uuid": "3068bfcd-1a1d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://5ync4-loop.goldridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772884939, "uuid": "7dc30214-1a1d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.69.188:59342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772884988, "uuid": "9ae1d130-1a1d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://vvest-route.darkridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772885111, "uuid": "e4803dea-1a1d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.23.205.168/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772885169, "uuid": "074caf7d-1a1e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.235.219:41302/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772885408, "uuid": "9582658d-1a1e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.73.99:56852/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772885474, "uuid": "bccc870e-1a1e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.165.160:56849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772885475, "uuid": "bdae3033-1a1e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.221.247:35179/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772885590, "uuid": "01c51a10-1a1f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.118.47:36264/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772885709, "uuid": "48db8d9d-1a1f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://min0r-stream.darkridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772885950, "uuid": "d84a4070-1a1f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://tintttw.darkridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772885952, "uuid": "d9dad40e-1a1f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/b1tcherss/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772886013, "uuid": "fe64ad96-1a1f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/b1tcherss/FiveM-Spoofer/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772886026, "uuid": "05a8810d-1a20-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.89.245:44949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772886072, "uuid": "2105cd51-1a20-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/chesst1s/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772886072, "uuid": "2125e3a9-1a20-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/chesst1s/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772886127, "uuid": "424295c1-1a20-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-cor3.darkridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772886131, "uuid": "4456021a-1a20-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/bluexxim/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772886132, "uuid": "44f11aa2-1a20-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/bluexxim/FiveM-Spoofer/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772886320, "uuid": "b547c4d2-1a20-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://azuro.pro/Launcher.zip", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772887210, "uuid": "c7736511-1a22-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://fallshie.stonefield.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772887688, "uuid": "e466792e-1a23-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://jqicypl.stonefield.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772887825, "uuid": "366ca13c-1a24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.65:42726/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772887941, "uuid": "7b45053b-1a24-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.64.110:37894/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772888181, "uuid": "0a29725e-1a25-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.89.245:44949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772888527, "uuid": "d86e6f81-1a25-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://formalcraft.stonefield.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772888598, "uuid": "02f20d71-1a26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.235.242.43:53460/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772888948, "uuid": "d390601d-1a26-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cora-clu.stonefield.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772889197, "uuid": "67e8353c-1a27-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.195.125:46698/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772889369, "uuid": "ce35bf77-1a27-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://route-spa.windfield.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772889373, "uuid": "d10e991d-1a27-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.64.110:37894/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772889614, "uuid": "60a58a4b-1a28-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sens0-core.windfield.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772889620, "uuid": "63e82358-1a28-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.20.126:52043/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772890160, "uuid": "a5a21c2d-1a29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.84.135:39767/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772890270, "uuid": "e74c8197-1a29-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://fernsecur.windfield.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772890336, "uuid": "0e8948ef-1a2a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.33.18:56856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772890570, "uuid": "9a5ab509-1a2a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/yurism123/rbxfpsunlocker/main/puppetman/Software_1.4-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772890572, "uuid": "9b52871a-1a2a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/yurism123/rbxfpsunlocker/raw/refs/heads/main/puppetman/Software_1.4-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772890687, "uuid": "e02e1f70-1a2a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/weedgirl08/Roblox-Scripts/refs/heads/main/terrifyingly/Roblox_Scripts_2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772890687, "uuid": "e04e0210-1a2a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://e66c3.lakecrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772890691, "uuid": "e287d266-1a2a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/weedgirl08/Roblox-Scripts/raw/refs/heads/main/terrifyingly/Roblox_Scripts_2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772890935, "uuid": "7401df51-1a2b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.158.65:46342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772890988, "uuid": "9377f758-1a2b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://veltideis.lakecrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772891120, "uuid": "e2047ba3-1a2b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.20.126:52043/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772891120, "uuid": "e225643e-1a2b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.195.125:46698/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772891299, "uuid": "4c9c2121-1a2c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.195.249:46096/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772891409, "uuid": "8e703744-1a2c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/nasernazem/TInjector_Symbi/refs/heads/master/stub/Injector_Symbi_T_v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772891409, "uuid": "8ea97b42-1a2c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/nasernazem/TInjector_Symbi/raw/refs/heads/master/stub/Injector_Symbi_T_v3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772891469, "uuid": "b257d426-1a2c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://medi3-graph.lakecrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772891775, "uuid": "6842daf6-1a2d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.235.219:41302/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772891827, "uuid": "8782fa4e-1a2d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper-rap1d.lakecrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772891844, "uuid": "91b9d438-1a2d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.26.184:53781/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772891904, "uuid": "b55ae60e-1a2d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.23.216:48683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772892008, "uuid": "f36c0435-1a2d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/rdx/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772892027, "uuid": "fea79c12-1a2d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.33.18:56856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772892203, "uuid": "67cdee2c-1a2e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.135.206.203:46848/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772892255, "uuid": "868c5495-1a2e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.195.249:46096/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772892258, "uuid": "8873257f-1a2e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.12.226:49015/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772892430, "uuid": "eea98cf4-1a2e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://smarttrue.oakridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772892501, "uuid": "194882b4-1a2f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.158.65:46342/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772892619, "uuid": "5fb77e55-1a2f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.34.32:33306/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772892746, "uuid": "ab305e11-1a2f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.69.121:48815/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772892979, "uuid": "35f33c62-1a30-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.26.184:53781/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893235, "uuid": "cef1de74-1a30-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.104.92:47643/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893327, "uuid": "05969c7c-1a31-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://scriptsprout.oakridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893342, "uuid": "0e987651-1a31-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://scriptsprout.oakridge.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893399, "uuid": "309ea7f3-1a31-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.124.78:36801/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893463, "uuid": "56ea3b09-1a31-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.23.216:48683/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893511, "uuid": "7340d5bf-1a31-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mora-branch.oakridge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893747, "uuid": "fffed429-1a31-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/hydrangeapaniculatabokchoi171/Basic-Injecting-code-to-roblox-process/refs/heads/main/Guarrau/roblox_code_Basic_to_process_Injecting_3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893747, "uuid": "00021f33-1a32-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bytebin.ironcrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893820, "uuid": "2b7ca883-1a32-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.135.206.203:46848/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893987, "uuid": "8f017a13-1a32-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ounissi-meriem/axon/main/src/core/Software-v1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772893988, "uuid": "8f536ae2-1a32-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ounissi-meriem/axon/raw/refs/heads/main/src/core/Software-v1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772894108, "uuid": "d763e13e-1a32-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ultraautumn.ironcrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772894354, "uuid": "69b632f9-1a33-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.240.15:33177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772894407, "uuid": "892b0fb8-1a33-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/AlHayaza/Codex-Roblox/refs/heads/main/pietism/Roblox_Codex_v2.8-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772894413, "uuid": "8ce0a520-1a33-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/AlHayaza/Codex-Roblox/raw/refs/heads/main/pietism/Roblox_Codex_v2.8-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772894647, "uuid": "183ce56c-1a34-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/nobo8/ROBLOX-MACRO-V3.0.0/main/Language/MACR_ROBLO_v3.0-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772894652, "uuid": "1b830a64-1a34-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/nobo8/ROBLOX-MACRO-V3.0.0/raw/refs/heads/main/Language/MACR_ROBLO_v3.0-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772894840, "uuid": "8bae3e99-1a34-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.117:44855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772895068, "uuid": "134a8d57-1a35-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://opticspower.ironcrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772895077, "uuid": "1877afd2-1a35-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.69.121:48815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772895200, "uuid": "61fc2b2e-1a35-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.244:47526/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772895369, "uuid": "c694d130-1a35-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://norvenen9.ironcrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772895562, "uuid": "39d6ffa2-1a36-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.7.29:46282/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772896446, "uuid": "48f73547-1a38-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://norflux0os.starfield.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772896448, "uuid": "49ce4b99-1a38-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.99:45508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772896703, "uuid": "e1ae471b-1a38-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.7.29:46282/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772896928, "uuid": "681bcfbb-1a39-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Skardavid86/rpc/raw/refs/heads/main/packet/1.txt", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772896928, "uuid": "6831e489-1a39-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Skardavid86/rpc/refs/heads/main/packet/1.txt", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897067, "uuid": "baec071f-1a39-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.151.23:45971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897122, "uuid": "dbd3eafc-1a39-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.151.23:45971/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897168, "uuid": "f6e9b03d-1a39-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-spirit.freebspirit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897355, "uuid": "6690a511-1a3a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.127.11:49703/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897468, "uuid": "a9cbd2a8-1a3a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Thesigma10/revbshell/refs/heads/main/ko/Software-1.6-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897468, "uuid": "a9e92bec-1a3a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Thesigma10/revbshell/raw/refs/heads/main/ko/Software-1.6-beta.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897469, "uuid": "aa5fc73d-1a3a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/argadia38/LAMPA-Client/raw/refs/heads/main/Eridanid/LAMP_Client_v2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897469, "uuid": "aaa0ecfe-1a3a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/argadia38/LAMPA-Client/refs/heads/main/Eridanid/LAMP_Client_v2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897539, "uuid": "d4598183-1a3a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.146.90:52964/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897588, "uuid": "f15a2a04-1a3a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/shura-gh0st69/peer_hire_hackhazards_25/raw/refs/heads/main/smart_contracts/contracts/utils/hire-peer-hackhazards-3.3-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897588, "uuid": "f162f1d6-1a3a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/shura-gh0st69/peer_hire_hackhazards_25/refs/heads/main/smart_contracts/contracts/utils/hire-peer-hackhazards-3.3-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897647, "uuid": "149ac2e3-1a3b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://b-node.freebspirit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897656, "uuid": "1a0c67f6-1a3b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.244:47526/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897657, "uuid": "1a648d27-1a3b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.15.170:59239/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897848, "uuid": "8c87a82a-1a3b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.254.254:33384/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772897900, "uuid": "ab7bc294-1a3b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.99:45508/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772898132, "uuid": "357496f6-1a3c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.203.152:35447/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772898206, "uuid": "61e99783-1a3c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.216.55:49977/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772898211, "uuid": "64ef4389-1a3c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.216.55:49977/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772898262, "uuid": "82eaae1d-1a3c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.143.226:42945/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772898727, "uuid": "988bd4c4-1a3d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://repeat-hub.repeatsensat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772898804, "uuid": "c637325b-1a3d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.138.247:59937/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772898854, "uuid": "e41bd892-1a3d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.138.247:59937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772898855, "uuid": "e470aa0f-1a3d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.254.254:33384/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899030, "uuid": "4caeed9d-1a3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/6624765280/0Nwzywk.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899329, "uuid": "ff3e3b07-1a3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899329, "uuid": "ff591f40-1a3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "ff65ddce-1a3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "ff752890-1a3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "ff753a0b-1a3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "ff7b6801-1a3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "ff7d5f74-1a3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "ff7fe48d-1a3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "ff81c6da-1a3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899330, "uuid": "ff96bf0d-1a3e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899331, "uuid": "000b9fe8-1a3f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899332, "uuid": "00c25b95-1a3f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899398, "uuid": "281344ea-1a3f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.146.90:52964/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899446, "uuid": "44e15c13-1a3f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sens-v2.repeatsensat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899627, "uuid": "b0770049-1a3f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://repeat-01.repeatsensat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772899866, "uuid": "3f4b862d-1a40-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sens-track.repeatsensat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772900173, "uuid": "f5dc804f-1a40-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cruc-base.crucifionsalval.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772900416, "uuid": "86dc1114-1a41-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.58.238:39149/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772900592, "uuid": "eff9f131-1a41-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://salv-unit.crucifionsalval.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772900600, "uuid": "f4cbd832-1a41-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.203.152:35447/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772900656, "uuid": "163b8bf4-1a42-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.93.196:53431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772901311, "uuid": "9c57bba5-1a43-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://salv-net.crucifionsalval.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772901427, "uuid": "e150355c-1a43-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://lama-rel.lamarelativ.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772901789, "uuid": "b9244dc6-1a44-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://rel-node.lamarelativ.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902148, "uuid": "8f4a3094-1a45-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://lama-v5.lamarelativ.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902154, "uuid": "92c0d9fb-1a45-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.118.136:39679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902155, "uuid": "938cabcc-1a45-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.83.43:53128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902280, "uuid": "ddd33730-1a45-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.93.196:53431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902338, "uuid": "00507010-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.206.86:53721/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902389, "uuid": "1f0f7ca8-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://rel-sync.lamarelativ.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902396, "uuid": "233eb242-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.206.86:53721/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902567, "uuid": "88f5ce09-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.219.237.111:3000/files/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902567, "uuid": "891e4e66-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://kizarmenu.top/get-file.php", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902567, "uuid": "893a7eed-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ademmartinez71-cmd/test/raw/refs/heads/main/XClient.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902567, "uuid": "89402203-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ademmartinez71-cmd/test/refs/heads/main/XClient.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "Xworm Rat", "colour": "#d16099", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902567, "uuid": "894ba733-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/adyvot/update/refs/heads/main/0urkspr63xoryra2.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902568, "uuid": "8962c2f1-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/adyvot/update/raw/refs/heads/main/0urkspr63xoryra2.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902687, "uuid": "d09d9036-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.irbis2000.com/WPS_Setup64.exe", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902694, "uuid": "d499d6a3-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://021.zip98d.top/acd746d7fe8b40c7b1f8-1.0.xpi", "Tag": [ { "name": "extension", "colour": "#6beaaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902749, "uuid": "f58c5ecc-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cav-oral.cavalieroral.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902872, "uuid": "3f0ba936-1a47-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:47647/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902878, "uuid": "42aa40f2-1a47-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.55.197.206:60444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772902880, "uuid": "43e55b90-1a47-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.58.238:39149/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772903053, "uuid": "aa917bd2-1a47-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://oral-v4.cavalieroral.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772903564, "uuid": "db87a9ef-1a48-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://msimasidownload.duckdns.org/optimized_MSI/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772903589, "uuid": "ea7568d3-1a48-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.44.159.145/25/c/img_221646.png", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772903591, "uuid": "eb812a88-1a48-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cav-base.cavalieroral.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772903649, "uuid": "0dee08fb-1a49-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://oral-net.cavalieroral.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772903887, "uuid": "9b9c15f4-1a49-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://any-up.anyutkiup.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772904066, "uuid": "06891126-1a4a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.205.59.12:35761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772904201, "uuid": "56f11ca9-1a4a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.161.113:58763/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772904310, "uuid": "98431013-1a4a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://utki-v3.anyutkiup.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772904378, "uuid": "c0573849-1a4a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.0.133:51189/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772904437, "uuid": "e3cbb251-1a4a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.190.19.101:37523/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772904610, "uuid": "4af1dc29-1a4b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://any-08.anyutkiup.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772904908, "uuid": "fc823dcc-1a4b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://up-flow.anyutkiup.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905326, "uuid": "f576e56f-1a4c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.239/oqqqqoa.mp3", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905329, "uuid": "f78ec7b0-1a4c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.239/kfhogts", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905388, "uuid": "1a690603-1a4d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://night-mode.nightcreate.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905457, "uuid": "43766343-1a4d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.0.133:51189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905508, "uuid": "62387faf-1a4d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://acecareer.edu/wp-includes/certificates/hOV.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905510, "uuid": "630a6948-1a4d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://acecareer.edu/wp-includes/certificates/Ocher.exe", "Tag": [ { "name": "CHStealer", "colour": "#8d3cca", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905511, "uuid": "640d9302-1a4d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://acecareer.edu/wp-includes/certificates/Qtum.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905511, "uuid": "641dcd6e-1a4d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://acecareer.edu/wp-includes/certificates/acr-karimichikstrelyaet-639081475329349420.exe", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905566, "uuid": "84eaaaab-1a4d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://acecareer.edu/wp-includes/certificates/Host.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905567, "uuid": "84fdb9cd-1a4d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://acecareer.edu/wp-includes/certificates/WindowsUpdateHelper.ps1", "Tag": [ { "name": "asciii", "colour": "#1c1535", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905567, "uuid": "85145bf6-1a4d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://acecareer.edu/wp-includes/certificates/Config.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905570, "uuid": "8749d89b-1a4d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://acecareer.edu/wp-includes/certificates/Geany", "Tag": [ { "name": "GhostSocks", "colour": "#AC3D0C", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905807, "uuid": "148e30e8-1a4e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.149.73.60/4SLEYpfAk57hGubo/messagebus.pdf", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905807, "uuid": "148fefa4-1a4e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.149.73.60/4SLEYpfAk57hGubo/FNPLicensingService.php", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905808, "uuid": "14a018d9-1a4e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.149.73.60/4SLEYpfAk57hGubo/wslservice.mp3", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905879, "uuid": "3f29588e-1a4e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.44.171:40087/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772905938, "uuid": "62263f86-1a4e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.190.19.101:37523/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772906047, "uuid": "a3122cb6-1a4e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://crea-v11.nightcreate.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772906293, "uuid": "35ce8bdf-1a4f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.9.98:52470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772906408, "uuid": "7a5ef0fe-1a4f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/bur/fast.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772906408, "uuid": "7a8172f5-1a4f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/mr/random.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772906408, "uuid": "7abd482a-1a4f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/amka/random.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772906411, "uuid": "7c58d2cb-1a4f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/321/random.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772906411, "uuid": "7c6be11b-1a4f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://night-gate.nightcreate.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772906412, "uuid": "7ce8036f-1a4f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.137.245.221/2.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772906531, "uuid": "c408ee7e-1a4f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.224.154:34702/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772907067, "uuid": "031ef6f9-1a51-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://crea-sync.nightcreate.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772907309, "uuid": "9358d978-1a51-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://anti-vol.antivoluptuous.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772907552, "uuid": "248ae9cf-1a52-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://volup-v6.antivoluptuous.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772907791, "uuid": "b306e098-1a52-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.153.20:50014/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772907850, "uuid": "d5f0db68-1a52-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://anti-02.antivoluptuous.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908038, "uuid": "46453020-1a53-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.36.251:36970/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908209, "uuid": "abb457db-1a53-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://volup-net.antivoluptuous.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908268, "uuid": "ced95295-1a53-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.45/data.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908275, "uuid": "d35c6f3c-1a53-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.153.20:50014/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908327, "uuid": "f20d7e75-1a53-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.45/bbc", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908330, "uuid": "f44552d9-1a53-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.44.171:40087/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908332, "uuid": "f55a50e2-1a53-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.45/data.aarch64", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908569, "uuid": "8295ad65-1a54-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://whale-port.parishwhale.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908628, "uuid": "a595698a-1a54-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.128.168:53278/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908635, "uuid": "a9bc5521-1a54-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://fertas.com.tr/fish.txt", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908818, "uuid": "16b247b1-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908818, "uuid": "16b3aa94-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908818, "uuid": "16b41e4c-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908818, "uuid": "16b4c7f6-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908818, "uuid": "16b4e40b-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908818, "uuid": "16b5aca1-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908818, "uuid": "16b6cd39-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908818, "uuid": "16b757db-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908818, "uuid": "16b8de93-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908818, "uuid": "16b9339d-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908818, "uuid": "16b970c7-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908818, "uuid": "16b9788d-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908818, "uuid": "16b9f76e-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908818, "uuid": "16ba825f-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908818, "uuid": "16baf962-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.93.52.81/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908821, "uuid": "18e49fca-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/bins/sora.ppc440fp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908829, "uuid": "1d56a5cb-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/bins/sora.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908829, "uuid": "1d99253e-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/bins/sora.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908830, "uuid": "1e070bfd-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.8.68.4/bins/sora.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908830, "uuid": "1e2412c5-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.97.124.196:6677/main/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908831, "uuid": "1e972001-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.38.142.156/huhu/titanjr.", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772908866, "uuid": "33c00b87-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://par-v33.parishwhale.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772909050, "uuid": "a11825c3-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.64.60:51110/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772909051, "uuid": "a1fa0e7d-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ccleaner.gl", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772909530, "uuid": "bf10e14b-1a56-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.36.251:36970/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772909531, "uuid": "bfbffc01-1a56-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.98.193:53181/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772909587, "uuid": "e14fe3de-1a56-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://whale-sync.parishwhale.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772909892, "uuid": "976460d8-1a57-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://par-node.parishwhale.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772909948, "uuid": "b8bbbbbf-1a57-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.225.158:33480/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772909949, "uuid": "b8d7813d-1a57-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.138.112:48357/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772910075, "uuid": "0460159f-1a58-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.128.168:53278/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772910125, "uuid": "21caa76b-1a58-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.228.197/sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772910132, "uuid": "25e122d7-1a58-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.138.112:48357/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772910132, "uuid": "25f16a10-1a58-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.66.117:36839/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772910499, "uuid": "01182173-1a59-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.66.117:36839/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772910608, "uuid": "41b92d3d-1a59-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cling-way.clingway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772910624, "uuid": "4b44dc79-1a59-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.98.193:53181/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772910683, "uuid": "6e87982c-1a59-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.133.220:56008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772910797, "uuid": "b2c9b53d-1a59-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.225.158:33480/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772911153, "uuid": "86a69a76-1a5a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://way-v1.clingway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772911154, "uuid": "874fd987-1a5a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.53.28.16:39353/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772911341, "uuid": "f689abf5-1a5a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.137.173:53936/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772911452, "uuid": "38a6e206-1a5b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cling-05.clingway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772911462, "uuid": "3ed5bd23-1a5b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.27.117:50508/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772911582, "uuid": "868bf518-1a5b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.113.194:58431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772911939, "uuid": "5b817bc9-1a5c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.231:37061/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772912167, "uuid": "e2eac6bb-1a5c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://way-logic.clingway.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772912349, "uuid": "4f9c6c01-1a5d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.102.248:39218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772912370, "uuid": "5bdcec16-1a5d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.162.44:39960/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772912467, "uuid": "963389dc-1a5d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://valley-node.sunvalley.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772912766, "uuid": "48487af3-1a5e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sun-v01.sunvalley.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772912958, "uuid": "ba9000fb-1a5e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.27.117:50508/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772912958, "uuid": "ba9b3bd3-1a5e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.231.168:34810/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772913007, "uuid": "d7d7b187-1a5e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://valley-sync.sunvalley.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772913020, "uuid": "df55edff-1a5e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.195.156:52993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772913145, "uuid": "2a47ff67-1a5f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.53.28.16:39353/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772913145, "uuid": "2a4a9ea6-1a5f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.231:37061/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772913246, "uuid": "665a99cf-1a5f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://sun-path.sunvalley.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772913725, "uuid": "83f5205f-1a60-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mist-base.mistgrove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772913849, "uuid": "cd873c3c-1a60-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/heine/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772914086, "uuid": "5b232cc0-1a61-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://grove-v12.mistgrove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772914144, "uuid": "7d41d710-1a61-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.228.197/dvr.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772914273, "uuid": "ca2b0a04-1a61-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.13.201:54748/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772914273, "uuid": "ca442a66-1a61-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.13.201:54748/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772914447, "uuid": "31e78b22-1a62-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mist-net.mistgrove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772914763, "uuid": "eebe1268-1a62-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.231.168:34810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772914886, "uuid": "37ed9675-1a63-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.200.222.139:56916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772914944, "uuid": "5a14037b-1a63-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.8.3:33273/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772914997, "uuid": "79d24551-1a63-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.178.28:46151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772914998, "uuid": "7a4fdc46-1a63-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.202.95:55581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772915241, "uuid": "0b7c7141-1a64-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.202.95:55581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772915286, "uuid": "262be3d2-1a64-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://grove-flow.mistgrove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772915424, "uuid": "7842b303-1a64-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.158.227:37634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772915528, "uuid": "b6354077-1a64-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cliff-gate.pinecliff.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772915660, "uuid": "055bb68a-1a65-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.166.146:58818/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772915842, "uuid": "71896923-1a65-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.158.227:37634/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772915843, "uuid": "725e63ae-1a65-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.87.90:53171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772916093, "uuid": "07764062-1a66-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.62.119:53783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772916387, "uuid": "b66d23b5-1a66-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.20.231:51489/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772916428, "uuid": "ce9b14a4-1a66-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cliff-unit.pinecliff.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772916445, "uuid": "d8e33b27-1a66-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.200.222.139:56916/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772916608, "uuid": "3a730877-1a67-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://pine-edge.pinecliff.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772917031, "uuid": "36857f6f-1a68-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bend-core.riverbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772917102, "uuid": "6096a99e-1a68-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.111.130.62:49367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772917267, "uuid": "c33d94ad-1a68-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/twizt.exe", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772917268, "uuid": "c3790a68-1a68-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/rem.exe", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772917468, "uuid": "3ac62695-1a69-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.111.130.62:49367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772917627, "uuid": "99686ff2-1a69-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://river-v44.riverbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772917642, "uuid": "a2885597-1a69-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.87.90:53171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772917706, "uuid": "c8a46a75-1a69-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.130.177:41066/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772917765, "uuid": "ebec2517-1a69-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.20.231:51489/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772918109, "uuid": "b9007186-1a6a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://bend-sync.riverbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772918372, "uuid": "55b1b721-1a6b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.115.171:35910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772918529, "uuid": "b35be26f-1a6b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://river-data.riverbend.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772918712, "uuid": "1ff67aaa-1a6c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ash-vault.ashgrove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772918728, "uuid": "297fc8f6-1a6c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.24.6:37723/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772919367, "uuid": "a6b34e9e-1a6d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://grove-v05.ashgrove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772919786, "uuid": "a05ef5af-1a6e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ash-hub.ashgrove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772920146, "uuid": "77404fb8-1a6f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.92.149:50915/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772920217, "uuid": "a1451411-1a6f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.122.152:46681/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772920278, "uuid": "c5a27ff9-1a6f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.76.196:51671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772920394, "uuid": "0af00219-1a70-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.24.6:37723/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772920446, "uuid": "29d65254-1a70-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://grove-node.ashgrove.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772920866, "uuid": "243925d3-1a71-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://ridge-peak.stormridge.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772921046, "uuid": "8f32977e-1a71-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://storm-v6.stormridge.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772921181, "uuid": "dff77476-1a71-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.92.149:50915/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772921425, "uuid": "719cea6e-1a72-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.174.192:47715/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772921709, "uuid": "1ada0b45-1a73-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://storm-base.stormridge.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772921717, "uuid": "1f72fc89-1a73-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.76.196:51671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772921721, "uuid": "21f41527-1a73-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.122.152:46681/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772921951, "uuid": "aab8dbd3-1a73-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.0.107:36455/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772922139, "uuid": "1b229258-1a74-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.50.58:48412/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772922186, "uuid": "37291501-1a74-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://plain-site.frostplain.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772922248, "uuid": "5bc80d00-1a74-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.239.144:37727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772922789, "uuid": "9e59888b-1a75-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://frost-v77.frostplain.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772923030, "uuid": "2e32d216-1a76-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.174.192:47715/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772923207, "uuid": "97a13598-1a76-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://plain-net.frostplain.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772923639, "uuid": "98fbaf10-1a77-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.50.58:48412/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772923687, "uuid": "b590446b-1a77-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://frost-run.frostplain.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772923746, "uuid": "d909728f-1a77-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.0.107:36455/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772923871, "uuid": "2378666a-1a78-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.239.144:37727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772923927, "uuid": "446f2e3e-1a78-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://brook-way.meadowbrook.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772924587, "uuid": "cdbcffa6-1a79-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mead-v08.meadowbrook.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772924717, "uuid": "1b9df522-1a7a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.102.42:39473/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772925006, "uuid": "c7984f75-1a7a-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://brook-sync.meadowbrook.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772925127, "uuid": "1018cf46-1a7b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.252.207:42146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772925311, "uuid": "7d5b5061-1a7b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.222/files/909884829/5YsbmtO.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772925316, "uuid": "8072e240-1a7b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.178.238:51839/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772925492, "uuid": "e9a44177-1a7b-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.252.207:42146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772925608, "uuid": "2e53b08d-1a7c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://mead-flow.meadowbrook.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772925789, "uuid": "9a3276a6-1a7c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://hill-logic.copperhill.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772925852, "uuid": "c00c9ac5-1a7c-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.187.82.254:33769/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772926271, "uuid": "b98c3527-1a7d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.14.69:34893/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772926389, "uuid": "ffd02dfa-1a7d-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cop-v09.copperhill.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772926449, "uuid": "23e65bb5-1a7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.1.7:36760/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772926702, "uuid": "ba9f0667-1a7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.187.82.254:33769/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772926808, "uuid": "f9a764e0-1a7e-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://hill-gate.copperhill.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772927167, "uuid": "cffd609e-1a7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://cop-unit.copperhill.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772927228, "uuid": "f44fbf04-1a7f-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.194.249:41566/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772927408, "uuid": "5fb658bb-1a80-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://creek-ref.shadowcreek.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772927767, "uuid": "35307643-1a81-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "https://shad-v11.shadowcreek.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772927777, "uuid": "3b5096c5-1a81-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.28.103.46:46253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772927949, "uuid": "a1c4bf38-1a81-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.14.69:34893/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772927949, "uuid": "a1fcf9c9-1a81-11f1-8a4c-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.194.249:41566/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772902566, "uuid": "8856c442-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "021.zip98d.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772872506, "uuid": "8b6576b5-1a00-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "0a6nq1j0.budenowcvolt.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772853186, "uuid": "8fd731e1-19d3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.181.225.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772867165, "uuid": "1bc227cb-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.27.157.144", "Tag": [ { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772902565, "uuid": "880a71e7-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.219.237.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772921944, "uuid": "a6e50e6e-1a73-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.0.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772891885, "uuid": "a9ec6459-1a2d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.23.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772895185, "uuid": "590ef6d4-1a35-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.27.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772894824, "uuid": "822a02b2-1a34-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.95.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772864764, "uuid": "84b6f72a-19ee-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.114.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860025, "uuid": "7bf51bb9-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.161.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772912345, "uuid": "4d6c159e-1a5d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.162.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772878805, "uuid": "36003a1e-1a0f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.27.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772882106, "uuid": "e55f8304-1a16-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.83.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772910665, "uuid": "63a6a525-1a59-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.133.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848806, "uuid": "5cd128bc-19c9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.127.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772927224, "uuid": "f20fdf6a-1a7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.194.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772875565, "uuid": "aaaba75d-1a07-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.251.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772850605, "uuid": "8d5d21af-19cd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.47.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772850484, "uuid": "453204ec-19cd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.29.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772897524, "uuid": "cb4a2e37-1a3a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.146.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772889186, "uuid": "6125b86c-1a27-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.195.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772855224, "uuid": "4e99b2a7-19d8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.6.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772897047, "uuid": "af1761d9-1a39-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.151.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772850907, "uuid": "4199c3cf-19ce-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.233.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772867585, "uuid": "15e25a14-19f5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.233.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772872145, "uuid": "b3fafac5-19ff-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.245.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772850425, "uuid": "21f3d07a-19cd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.165.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772892725, "uuid": "9f0b974b-1a2f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.69.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893206, "uuid": "bdae2d3c-1a30-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.104.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772894346, "uuid": "64b40e93-1a33-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.240.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772914265, "uuid": "c5c00aa2-1a61-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.13.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772869805, "uuid": "418f91ba-19fa-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.172.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772897826, "uuid": "7f5ca9db-1a3b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.254.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772879825, "uuid": "9608edee-1a11-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.15.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772916366, "uuid": "a9e49c0f-1a66-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.20.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772887806, "uuid": "2b1ea546-1a24-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.91.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772873645, "uuid": "325fb989-1a03-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.28.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772884923, "uuid": "74b492db-1a1d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.69.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772857745, "uuid": "2cd22fa4-19de-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.79.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772898246, "uuid": "795c8b4a-1a3c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.143.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772876884, "uuid": "bc92f50f-1a0a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.59.129.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772909945, "uuid": "b69aff0e-1a57-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.138.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772907786, "uuid": "afd501c0-1a52-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.153.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772845684, "uuid": "184c7d54-19c2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.10.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772854925, "uuid": "9c46c40d-19d7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.14.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772892606, "uuid": "57ab2a95-1a2f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.34.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772913006, "uuid": "d6e95a96-1a5e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.195.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772918708, "uuid": "1dc9b01b-1a6c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.24.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772888586, "uuid": "fbb6a42c-1a25-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.235.242.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772926445, "uuid": "217c0fd9-1a7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.1.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772856965, "uuid": "5c1fac93-19dc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.144.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772917685, "uuid": "bc518800-1a69-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.130.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772915406, "uuid": "6dd7acc2-1a64-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.158.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772842564, "uuid": "d4b43c6d-19ba-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.78.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772864406, "uuid": "af3d01cd-19ed-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.86.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772868544, "uuid": "52075d5a-19f7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.11.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772857205, "uuid": "eb5f21b6-19dc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.229.164.94", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772915825, "uuid": "679066de-1a65-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.87.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772867165, "uuid": "1bc12eed-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.94.9.250", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772911325, "uuid": "ed0dd0f7-1a5a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.137.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772869744, "uuid": "1d4a79d9-19fa-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.126.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905866, "uuid": "37355dfc-1a4e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.44.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772878987, "uuid": "a2151c71-1a0f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.168.219.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772877544, "uuid": "460b1e42-1a0c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.80.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772844906, "uuid": "488ad5e9-19c0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.93.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899325, "uuid": "fc9e78a2-1a3e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.42", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772908265, "uuid": "cd8dbfbd-1a53-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.45", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772904064, "uuid": "052e36fb-1a4a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.205.59.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772867224, "uuid": "3f4488ca-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.224.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772891285, "uuid": "4476e203-1a2c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.195.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772925124, "uuid": "0e592d8c-1a7b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.252.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772885584, "uuid": "fe66bc77-1a1e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.118.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848385, "uuid": "62195e92-19c8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.15.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772897346, "uuid": "61289d60-1a3a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.127.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772909525, "uuid": "bc730555-1a56-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.98.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772890925, "uuid": "6de30763-1a2b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.158.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772869563, "uuid": "b130ef07-19f9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.8.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772851266, "uuid": "17071c93-19cf-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.84.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772880607, "uuid": "679cc202-1a13-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.110.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772871425, "uuid": "06ba6f77-19fe-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.93.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772892245, "uuid": "80ae6e1e-1a2e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.12.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772841725, "uuid": "e0749ae5-19b8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "196.251.107.133", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772880545, "uuid": "43122d21-1a13-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "216.126.86.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772859664, "uuid": "a5099bef-19e2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.172.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772872145, "uuid": "b3fb13fb-19ff-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.221.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772887926, "uuid": "726869f2-1a24-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.202.64.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772885165, "uuid": "04ca7a60-1a1e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.13.235.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772914865, "uuid": "2b6adf4b-1a63-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.200.222.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772892184, "uuid": "5c92d7ea-1a2e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.135.206.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772898785, "uuid": "baffa90e-1a3d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.138.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772874784, "uuid": "d91fa5da-1a05-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.109.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772866145, "uuid": "bbcbcad0-19f1-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.216.210.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893386, "uuid": "290e8bf9-1a31-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.124.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772925844, "uuid": "bb58aed5-1a7c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.187.82.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772898186, "uuid": "55c29d5a-1a3c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.216.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906526, "uuid": "c093b59a-1a4f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.224.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772924705, "uuid": "14937eb5-1a7a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.102.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772904187, "uuid": "4e76daad-1a4a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.161.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772908024, "uuid": "3dffb1e2-1a53-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.36.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772909945, "uuid": "b69b0d3d-1a57-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.225.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772868906, "uuid": "29a5baff-19f8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.40.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772908624, "uuid": "a3a0e121-1a54-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.128.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772877606, "uuid": "6afe3e54-1a0c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.90.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772902146, "uuid": "8e1b553a-1a45-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.118.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772847785, "uuid": "fc4abfdd-19c6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.164.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870764, "uuid": "7d170ea5-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.141.148.121", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905806, "uuid": "13858b87-1a4e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.149.73.60", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772911145, "uuid": "81f3faa6-1a5a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.53.28.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772877305, "uuid": "b7ad79db-1a0b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.255.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772884807, "uuid": "2f796d59-1a1d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "5ync4-loop.goldridge.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772921405, "uuid": "656a155d-1a72-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.174.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772873345, "uuid": "7fa6bd9c-1a02-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.80.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772920206, "uuid": "9a7c1c0a-1a6f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.122.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772885107, "uuid": "e22a1005-1a1d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.23.205.168", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772872205, "uuid": "d7d8a6fe-19ff-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "67.20.225.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772877664, "uuid": "8daed7f0-1a0c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "73rgwdew.getreplay.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870764, "uuid": "7d169e1b-19fc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.121.84.18", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772904426, "uuid": "dce7195d-1a4a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.190.19.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905507, "uuid": "618dd469-1a4d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "acecareer.edu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860685, "uuid": "05531c9b-19e5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "adobe-viewer.0lsons.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772856665, "uuid": "a92675e6-19db-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "adobe-viewer.iziliang.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772858707, "uuid": "6a6f2196-19e0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "adobe-viewer.mutluay.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772855644, "uuid": "48f7c73d-19d9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "adobe-viewer.parallelsw.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772882885, "uuid": "b5d03000-1a18-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "alignion.goldridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772886126, "uuid": "4147497a-1a20-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-cor3.darkridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772907848, "uuid": "d4c977d5-1a52-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "anti-02.antivoluptuous.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772907307, "uuid": "9225770e-1a51-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "anti-vol.antivoluptuous.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772904606, "uuid": "48b18562-1a4b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "any-08.anyutkiup.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772903885, "uuid": "9a9c05bf-1a49-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "any-up.anyutkiup.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772919784, "uuid": "9f351cca-1a6e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ash-hub.ashgrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772918708, "uuid": "1de16fb5-1a6c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ash-vault.ashgrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772858045, "uuid": "e0213a42-19de-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "auto-compass.automodcompass.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772886307, "uuid": "ada79151-1a20-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "azuro.pro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772897646, "uuid": "13a50b64-1a3b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "b-node.freebspirit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772867165, "uuid": "1bd9b0c5-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "baraltransportes.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772917027, "uuid": "342f4be9-1a68-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bend-core.riverbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772918107, "uuid": "b7950993-1a6a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bend-sync.riverbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772925004, "uuid": "c692f663-1a7a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "brook-sync.meadowbrook.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772923925, "uuid": "43a8060a-1a78-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "brook-way.meadowbrook.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893746, "uuid": "ff20c0b2-1a31-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "bytebin.ironcrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772872084, "uuid": "8fcf3e27-19ff-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cargo9-stack.dancingvck.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772903589, "uuid": "ea5871a6-1a48-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cav-base.cavalieroral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772902745, "uuid": "f337104f-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cav-oral.cavalieroral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772909047, "uuid": "9f5d4d49-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ccleaner.gl" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772846589, "uuid": "339cdc9a-19c4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cism-base.draniercism.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772847425, "uuid": "25f0bf87-19c6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cism-flow.draniercism.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772915526, "uuid": "b53c63ca-1a64-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cliff-gate.pinecliff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772916426, "uuid": "cd6ae8bf-1a66-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cliff-unit.pinecliff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772911447, "uuid": "363c80a8-1a5b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cling-05.clingway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772910606, "uuid": "40acad93-1a59-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cling-way.clingway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772927165, "uuid": "ce5f056e-1a7f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cop-unit.copperhill.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772926387, "uuid": "feff7cc6-1a7d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cop-v09.copperhill.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772888946, "uuid": "d251599a-1a26-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cora-clu.stonefield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772868725, "uuid": "bdbe3b32-19f7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "coralwil.draniercismn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772878146, "uuid": "accc490f-1a0d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "crafshi.getreplay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772907065, "uuid": "02364300-1a51-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "crea-sync.nightcreate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906045, "uuid": "a1e562d6-1a4e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "crea-v11.nightcreate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772927407, "uuid": "5e9a6472-1a80-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "creek-ref.shadowcreek.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772900171, "uuid": "f4cd45d0-1a40-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "cruc-base.crucifionsalval.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772851145, "uuid": "cee425a0-19ce-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dance-v9.dancingvcr.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772849524, "uuid": "08f9ade4-19cb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dance-vcr.dancingvcr.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772846406, "uuid": "c669ff41-19c3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dran-optic.draniercism.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772847187, "uuid": "9812b026-19c5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "dran02.draniercism.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772881686, "uuid": "eabe92da-1a15-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "drifstac.bluecrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772890685, "uuid": "deb3e91b-1a2a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "e66c3.lakecrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772887206, "uuid": "c51281dd-1a22-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "fallshie.stonefield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772890266, "uuid": "e4da78e0-1a29-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "fernsecur.windfield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772908632, "uuid": "a85e263a-1a54-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "fertas.com.tr" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772856670, "uuid": "ac314e99-19db-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "file-viewer.alcapps.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772854866, "uuid": "794694af-19d7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "file-viewer.detprod.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772888525, "uuid": "d74c03b7-1a25-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "formalcraft.stonefield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772897166, "uuid": "f5bb5463-1a39-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "free-spirit.freebspirit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772923685, "uuid": "b469725c-1a77-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "frost-run.frostplain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772922787, "uuid": "9d38b23f-1a75-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "frost-v77.frostplain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772863263, "uuid": "06542d7b-19eb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "g70aw0re.bucketeuthan.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772877844, "uuid": "f8dd60f5-1a0c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "geneexp.getreplay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772915284, "uuid": "2534ccd7-1a64-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "grove-flow.mistgrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772920444, "uuid": "28ddb787-1a70-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "grove-node.ashgrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772919365, "uuid": "a5bb8ba6-1a6d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "grove-v05.ashgrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772914085, "uuid": "5a14f8fb-1a61-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "grove-v12.mistgrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772926806, "uuid": "f8a2c5d0-1a7e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "hill-gate.copperhill.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772925785, "uuid": "97ee6086-1a7c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "hill-logic.copperhill.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772891825, "uuid": "861b01b2-1a2d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyper-rap1d.lakecrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772854865, "uuid": "78c46fe9-19d7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ional-hub.nasotoptional.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772856905, "uuid": "382da910-19dc-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ional-sync.nasotoptional.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772887686, "uuid": "e363539e-1a23-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "jqicypl.stonefield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772867165, "uuid": "1bd308de-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "keitarocheats.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772902566, "uuid": "88769318-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "kizarmenu.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772901424, "uuid": "e001c3e2-1a43-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "lama-rel.lamarelativ.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772902146, "uuid": "8e2c850f-1a45-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "lama-v5.lamarelativ.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772854266, "uuid": "134da60d-19d6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "lent-net.chopexcellent.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772925606, "uuid": "2d3c088b-1a7c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "mead-flow.meadowbrook.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772924585, "uuid": "ccaa658f-1a79-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "mead-v08.meadowbrook.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772891467, "uuid": "b1325248-1a2c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "medi3-graph.lakecrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772870164, "uuid": "1763a552-19fb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "mh738ng0.reinsurunrock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772885707, "uuid": "47bb02d2-1a1f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "min0r-stream.darkridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772913724, "uuid": "83153c37-1a60-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "mist-base.mistgrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772914445, "uuid": "30eddd6f-1a62-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "mist-net.mistgrove.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860746, "uuid": "29aad0ed-19e5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "mod-logic.automodcompass.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772859664, "uuid": "a510fc4e-19e2-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "mod-track.automodcompass.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893509, "uuid": "71d97fce-1a31-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "mora-branch.oakridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772850786, "uuid": "f8f72860-19cd-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "move-node.dancingvcr.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772903112, "uuid": "cdcf7254-1a47-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "msimasidownload.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772869384, "uuid": "4687ef52-19f9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "n3ural-mark.draniercismn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772875985, "uuid": "a53be555-1a08-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-5ound.caseoptional.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772906406, "uuid": "793a3cf5-1a4f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "night-gate.nightcreate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772905384, "uuid": "18441ae2-1a4d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "night-mode.nightcreate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772896445, "uuid": "47fd2314-1a38-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "norflux0os.starfield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772895366, "uuid": "c51f1fcf-1a35-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "norvenen9.ironcrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772895066, "uuid": "11fc6934-1a35-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "opticspower.ironcrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772903645, "uuid": "0b87d073-1a49-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "oral-net.cavalieroral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772903047, "uuid": "a736af7b-1a47-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "oral-v4.cavalieroral.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772909891, "uuid": "96485d88-1a57-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "par-node.parishwhale.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772908865, "uuid": "32bc7004-1a55-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "par-v33.parishwhale.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772874906, "uuid": "21d13233-1a06-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "passiveasset.caseoptional.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772844845, "uuid": "2423edb5-19c0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "petun-data.albanianpetun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772844065, "uuid": "5338207d-19be-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "petun-sys.albanianpetun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772871485, "uuid": "2aae4c52-19fe-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "pifn62.dancingvck.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772916607, "uuid": "395e7e42-1a67-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "pine-edge.pinecliff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772923206, "uuid": "96a91754-1a76-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "plain-net.frostplain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772922185, "uuid": "36413bae-1a74-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "plain-site.frostplain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860025, "uuid": "7c4c40dd-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "portal.ssa.s-w-a-t.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772842505, "uuid": "b1884895-19ba-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "pres-mode.horspresence.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772867165, "uuid": "1bdc8477-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-826b2258a9f74a40abe9ee543f2409a4.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772863326, "uuid": "2b6fe055-19eb-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "put08.putreplay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772847607, "uuid": "923bceb7-19c6-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "rein-dock.reinsurundock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848385, "uuid": "6225be91-19c8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "rein-v44.reinsurundock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772901785, "uuid": "b73aac79-1a44-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "rel-node.lamarelativ.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772902387, "uuid": "1dcb4f67-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "rel-sync.lamarelativ.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899625, "uuid": "af4bb75d-1a3f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "repeat-01.repeatsensat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772898726, "uuid": "9783a8b1-1a3d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "repeat-hub.repeatsensat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772863746, "uuid": "261ec0ec-19ec-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "replay-net.putreplay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772920864, "uuid": "23258fe4-1a71-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ridge-peak.stormridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772918528, "uuid": "b252318c-1a6b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "river-data.riverbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772917625, "uuid": "98899677-1a69-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "river-v44.riverbend.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772889366, "uuid": "cca493fb-1a27-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "route-spa.windfield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772901309, "uuid": "9b2a8dd0-1a43-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "salv-net.crucifionsalval.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772900586, "uuid": "ec3e2a7c-1a41-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "salv-unit.crucifionsalval.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772893325, "uuid": "044e9cfb-1a31-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "scriptsprout.oakridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899864, "uuid": "3e3980fc-1a40-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sens-track.repeatsensat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772899445, "uuid": "43f6c503-1a3f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sens-v2.repeatsensat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772889606, "uuid": "5bfdfdc3-1a28-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sens0-core.windfield.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772927765, "uuid": "3442045b-1a81-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "shad-v11.shadowcreek.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772880609, "uuid": "68f22745-1a13-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ship-spark.redcrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772892427, "uuid": "ed5a1120-1a2e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "smarttrue.oakridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860025, "uuid": "7c52d5b4-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ssa.portal.cogitar.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772858707, "uuid": "6aa3afa3-19e0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ssa.portal.ct1.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860026, "uuid": "7c628700-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ssa.portal.eigenlicht.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772858707, "uuid": "6a8008a6-19e0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ssa.portal.muratov.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860025, "uuid": "7c5d1b75-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ssa.portal.tobuy.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772871785, "uuid": "dd555b17-19fe-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "stone3-lab.dancingvck.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772921706, "uuid": "189d450b-1a73-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "storm-base.stormridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772921044, "uuid": "8e6f4773-1a71-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "storm-v6.stormridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772913245, "uuid": "6577d7e3-1a5f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sun-path.sunvalley.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772912764, "uuid": "46c8ca41-1a5e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sun-v01.sunvalley.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772848927, "uuid": "a4fa232f-19c9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sur-sync.reinsurundock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772847905, "uuid": "443dcfd4-19c7-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "sur-vault.reinsurundock.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772867165, "uuid": "1bdec582-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "tb2mod.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772885946, "uuid": "d5f5bad2-1a1f-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "tintttw.darkridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772872506, "uuid": "8b4e5ea7-1a00-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "trispireum7.dancingvck.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772882526, "uuid": "dfccb503-1a17-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "udfu.goldridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772894106, "uuid": "d60d23e9-1a32-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "ultraautumn.ironcrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772867166, "uuid": "1c55ddc3-19f4-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "union.macoms.la" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772904906, "uuid": "fb6addf7-1a4b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "up-flow.anyutkiup.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772855346, "uuid": "97085aa1-19d8-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "us04web.zoom.us.3cm.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772858707, "uuid": "6abc3568-19e0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "us04web.zoom.us.hmail.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860029, "uuid": "7ea7a9a5-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "us04web.zoom.us.pacl.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772855708, "uuid": "6ed6b3ff-19d9-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "us05web.zoom.us.1ax.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860028, "uuid": "7db462ae-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "us05web.zoom.us.vdns.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860685, "uuid": "05706c06-19e5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "us06web.zoom.hiaa.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860026, "uuid": "7c6f54fa-19e3-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "us06web.zoom.patho.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860685, "uuid": "059d5875-19e5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "us06web.zoom.us.chsh.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772858707, "uuid": "6aa84734-19e0-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "us06web.zoom.us.ez2.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772856665, "uuid": "a971baa4-19db-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "us06web.zoom.us.tobuy.us" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772904308, "uuid": "9710a81e-1a4a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "utki-v3.anyutkiup.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772912465, "uuid": "94ee21a0-1a5d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "valley-node.sunvalley.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772913006, "uuid": "d6f21cf6-1a5e-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "valley-sync.sunvalley.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772850965, "uuid": "64066bb6-19ce-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vcr-logic.dancingvcr.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772890984, "uuid": "9138376d-1a2b-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "veltideis.lakecrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772908206, "uuid": "aa49afd3-1a53-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "volup-net.antivoluptuous.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772907551, "uuid": "23971b24-1a52-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "volup-v6.antivoluptuous.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772884985, "uuid": "995c1c96-1a1d-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "vvest-route.darkridge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772912165, "uuid": "e1eb7728-1a5c-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "way-logic.clingway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772911149, "uuid": "846c11f3-1a5a-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "way-v1.clingway.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772908567, "uuid": "815c5d94-1a54-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "whale-port.parishwhale.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772909585, "uuid": "e047b2ff-1a56-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "whale-sync.parishwhale.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772902568, "uuid": "89654ed7-1a46-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.irbis2000.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860687, "uuid": "06b04212-19e5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.unique.hatumena.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860685, "uuid": "0589639c-19e5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.zoom.bigjaco.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772860685, "uuid": "056e031b-19e5-11f1-8a4c-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.zoom.kazoodle.com" } ] } }